Description
This script is vulnerable to directory traversal attacks.
Directory Traversal is a vulnerability which allows attackers to access restricted directories and read files outside of the web server's root directory.
Remediation
Your script should filter metacharacters from user input.
References
Related Vulnerabilities
uWSGI Path Traversal vulnerability
WordPress Plugin Download Shortcode Arbitrary File Disclosure (0.1)
WordPress Plugin Database Backup for WordPress 'edit.php' Directory Traversal (1.7)
WordPress Plugin Gallery-Flagallery Photo Portfolio Multiple Vulnerabilities (2.00)
WordPress Plugin Ajax Store Locator Directory Traversal (1.2.0)