Directory traversal vulnerability in SYNCK GRAPHICA Download Log CGI 3.0 and earlier allows remote attackers to read arbitrary files via a crafted filename.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-0877
http://www.synck.com/blogs/news/weblog_1420694040.html