Synergiser versions 1.2 RC1 and below suffer from local file inclusion and full path disclosure vulnerabilities.