CommerceSQL shopping cart allows remote file reading via a directory traversal vulnerability in its index.cgi.