CVE-2008-2820: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lang/lang-system.php in Open Azimyt CMS 0.22 minimal and 0.21 stable allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...