CVE-2006-4161: Undefined Security Weakness

Directory traversal vulnerability in the avatargallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the category parameter...