xweb version 1.0 is susceptible to a directory traversal attack that allows viewing of files outside of the web root.