CVE-2008-0458: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary local files via a .. dot dot in the newlang parameter to index.php...