CVE-2008-6842: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in data/modules/blog/modulepagessite.php in Pluck 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the post parameter...