CVE-2009-3824: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/processor.php in Greenwood PHP Content Manager 0.3.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the contentpath parameter...