CVE-2009-2931: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in p.php in SlideShowPro Director 1.1 through 1.3.8 allows remote attackers to read arbitrary files via directory traversal sequences in the a parameter...