Directory traversal vulnerability in the media manager in Nucleus CMS before 3.40 allows remote attackers to read arbitrary files via unknown vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/49142
http://www.vupen.com/english/advisories/2009/0637
http://www.securityfocus.com/bid/34040
http://www.nucleuscms.org/index.php/item/index.php/item/3051