Directory traversal

Directory traversal vulnerability in download.php in Tracking Requirements & Use Cases TRUC 0.11.0 allows remote attackers to read arbitrary files via a .. dot dot in the uploadfilename parameter...