Security Advisory
CVE-2011-5210
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in admin/preview.php in Limny 3.0.0 allows remote attackers to read arbitrary files via a ..%2F (encoded dot dot slash) in the theme parameter.