CVE-2015-7372: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the layerstyle parameter...