CVE-2008-2985

Directory traversal vulnerability in loadlanguage.php in CMReams CMS 1.3.1.1 Beta 2, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the pagelanguage parameter...