CVE-2010-1306: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Picasa comjoomlapicasa2 component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbitrary local files via a .. dot dot in the controller parameter to index.php. NOTE: some of these details are obtained from third party information...