Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitrary files via modified .. (dot dot) sequences in the URL including (1) \..%2f\ (encoded \/\ slash) \..../\ (multiple dot) and \..%255c../\ (double-encoded \\\\ backslash).