CVE-2008-0431: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in administrator/download.php in IDMOS aka Phoenix 1.0 allows remote attackers to read arbitrary files via a .. dot dot in the fileName parameter...