CVE-2009-3425: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/inc.thcmsadmindirtree.php in MaxCMS 3.11.20b allows remote attackers to read arbitrary files via directory traversal sequences in the thCMSroot parameter...