CVE-2008-6423: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in passwiki.php in PassWiki 0.9.16 RC3 and earlier allows remote attackers to read arbitrary local files via a .. dot dot in the siteid parameter...