CVE-2008-5062: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in php/calpdf.php in Mini Web Calendar mwcal 1.2 allows remote attackers to read arbitrary files via directory traversal sequences in the thefile parameter...