CVE-2009-3507: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modfile parameter...