Secunia Security Advisory – HACKERS PAL has discovered a vulnerability in Help Center Live, which can be exploited by malicious people to disclose sensitive information. Input passed to the file parameter in the osTicket module isn’t properly verified, before it is used to include files. This can be exploited to include arbitrary files from local resources. The vulnerability has been confirmed in version 2.0.2. Prior versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41595/sa17580.txt
Source: https://packetstormsecurity.com/files/41595/Secunia-Security-Advisory-17580.html