CVE-2007-0335: Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute

Jax Petition Book version 1.0.3.06 contains directory traversal vulnerabilities (a security flaw where attackers use .. sequences to access files outside the intended folder) in two PHP files. Remote attackers can exploit this by adding .. characters to the languagepack parameter, allowing them to view and run arbitrary local files on the server.