Web Blog 1.1 allows for remote file retrieval outside of the web root via a directory traversal attack.