CVE-2009-3664
Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or execute arbitrary files via a .. (dot dot) in the (1) p and (2) s parameters.
Date published : 2009-10-11
http://www.securityfocus.com/archive/1/506380/100/0/threaded