CVE-2013-7138: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System QCMS 4.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the start parameter...