CVE-2009-0291: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in fc.php in OpenX 2.6.3 allows remote attackers to include and execute arbitrary files via a .. dot dot in the MAXtype parameter...