CVE-2008-6735: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in qc/index.php in ThaiQuickCart 3 allows remote attackers to read arbitrary files via a .. dot dot in the sLanguage cookie...