CVE-2008-2974: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter...