CVE-2017-17992: Improper Limitation of a Pathname to a Restricted Directory

Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php formfilename parameter in a downloadform action...