Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.Referenceshttp://www.securityfocus.com/archive/1/194443http://www.securityfocus.com/bid/2960https://exchange.xforce.ibmcloud.com/vulnerabilities/6760