CVE-2008-3390: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in libraries/general.init.php in Minishowcase Image Gallery 09b136, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...