CVE-2007-4718: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in inc/lib/language.lib.php in Claroline before 1.8.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...