CVE-2020-10584: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal on the /admin/searchby.php script of Invigo Automatic Device Management ADM through 5.0 allows remote attackers to read arbitrary server files accessible to the user running the application...