Secunia

Mark Bassett has identified a vulnerability in AdManager, allowing malicious people to gain knowledge of sensitive information.

The problem is that AdManager fails to detect directory traversal attempts using the URL encoded representation of the "../" character sequence ("%2e%2e%5c"). This can be exploited to view files outside the web root.

Solution
The vendor has issued a hotfix and advises customers to contact technical support for instructions.
Further details available in Customer Area

Provided and/or discovered by
Mark Bassett

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area