Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the contents of the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/11875
https://exchange.xforce.ibmcloud.com/vulnerabilities/11874
http://www.securityfocus.com/bid/7439
http://www.securityfocus.com/bid/7438