iDEFENSE Security Advisory 12.14.05 – Remote exploitation of an input validation vulnerability in Trend Micro Inc.’s ServerProtect Management Console allows remote attackers to view the contents of arbitrary files on the underlying system. The problem specifically exists within the handling of the IMAGE parameter in the script rptserver.asp.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/42308/12.14.05-2.txt
Source: https://packetstormsecurity.com/files/42308/iDEFENSE-Security-Advisory-2005-12-14.2.html