Unspecified vulnerability in the loaders (load_*.php) in Ansilove before 1.03 allows remote attackers to read arbitrary files via unspecified vectors involving "converting files accessible by the webserver".
https://exchange.xforce.ibmcloud.com/vulnerabilities/24681
http://www.vupen.com/english/advisories/2006/0536
http://www.securityfocus.com/bid/16603
http://sourceforge.net/project/shownotes.php?release_id=392826