CVE-2011-3837: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in blogsystem/datafunctions.php in Wuzly 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the preview parameter to index.php...