CVE-2013-5107: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ROCKLANG cookie, as demonstrated in a login.index action to index.php...