NCH WebDictate Directory Traversal Vulnerability

A security vulnerability exists in NCH WebDictate, a web-based dictation recording, editing and management software, which stems from the product’s logprop?file=/… path fails to filter incoming special characters, which can be exploited to read critical files.