An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote attackers can read arbitrary files from the server via Directory Traversal.
https://www.supremainc.com/en/support/biostar-2-pakage.asp
http://packetstormsecurity.com/files/158576/Bio-Star-2.8.2-Local-File-Inclusion.html