CVE-2007-3505: Undefined Security Weakness

Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot sequence in the lang parameter to 1 qtfcheckname.php, 2 qtfjbirth.php, or 3 qtfjexists.php...