CVE-2009-1770: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/database/examples/addressbook.php in Flyspeck CMS 6.8 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...