Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the sLanguage Cookie parameter.
https://www.exploit-db.com/exploits/2719
https://exchange.xforce.ibmcloud.com/vulnerabilities/30024