Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) row_mysql_blocks_center_downfile parameter to includes/block_center_down.php; (2) row_mysql_blocks_center_topfile includes/parameter to block_center_top.php; (3) row_mysql_blocks_leftfile parameter to includes/block_left.php; (4) row_mysql_blocks_rightfile parameter to includes/block_right.php; and row_mysql_bloginfotheme parameter to (5) includes/window_down.php and (6) includes/window_top.php.