CVE-2009-2180: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary files via 1 a .. dot dot or 2 absolute path in the file parameter...