CVE-2008-4718: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in help/mini.php in X7 Chat 2.0.1 A1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the helpfile parameter, a different vector than CVE-2006-2156...