CVE-2007-6581: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Social Engine 2.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the globallang parameter to 1 headeralbum.php, 2 headerblog.php, or 3 headergroup.php; or 4 adminheaderalbum.php, 5 adminheaderblog.php, or 6...