CVE-2008-5748: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the 1 lang, 2 theme, and 3 module parameters...