CVE-2008-0798: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magicquotesgpc is disabled, allow remote attackers to read arbitrary files via a .. dot dot in the 1 ta parameter to artmedicindex.php, reached through index.php; and the 2 date parameter to artmedicprint.php...