Panmicro e-office Collaboration Management Platform File Download Vulnerability

Panmicro e-office's /inc/attach.php page has no filter on the file download name ATTACHMENTNAME passed in by the url... /, which can be used ... / to traverse the directory so that any file in any directory can be downloaded, leading to the formation of an arbitrary file download problem...