CVE-2010-2050: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Moron Solutions MS Comment commscomment component 0.8.0b for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...