Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file parameter to FileManager.aspx.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/91463http://seclists.org/fulldisclosure/2014/Feb/219http://www.securityfocus.com/bid/65740