CVE-2009-2338: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/startmodules.inc.php in FreeWebshop.org 2.2.9 R2, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the langfile parameter...