https://www.exploit-db.com/exploits/22542
https://www.securityfocus.com/bid/80202
https://cxsecurity.com/issue/WLB-2007100107
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200312-378

Alt-NTechnologiesWebAdmin2.0.0版本到2.0.2版本存在绝对路径遍历漏洞。带有管理员特权的远程攻击者可以（1）通过读取连接中Name参数的内容确定安装路径，以及（2）借助Name参数的绝对路径读取任意文件。

source: http://www.securityfocus.com/bid/7439/info

Reportedly, remote users can discover the installation directory of certain software on the underlying system by submitting an HTTP request to the WebAdmin server. This could allow an attacker to obtain sensitive information.

http://www.example.com/WebAdmin.dll?session=X&Program=MDaemon&Directory:Name=C:MDaemonApp&File:Name=MDAEMON.INI&View=EditFile

Alt-N Webadmin 2.0.2

Alt-N Webadmin 2.0.1

Alt-N Webadmin 2.0.0

来源:XF
名称:webadmin-webadmindll-view-files(11875)
链接:http://xforce.iss.net/xforce/xfdb/11875
来源:XF
名称:webadmin-webadmindll-path-disclosure(11874)
链接:http://xforce.iss.net/xforce/xfdb/11874
来源:BID
名称:7439
链接:http://www.securityfocus.com/bid/7439
来源:BID
名称:7438
链接:http://www.securityfocus.com/bid/7438
来源:BUGTRAQ
名称:20030425PathdisclosureandfileaccessonWebAdmin
链接:http://www.securityfocus.com/archive/1/319735
来源:SREASON
名称:3286
链接:http://securityreason.com/securityalert/3286