phpWebFileManager version 2.0.0 is susceptible to a directory traversal attack due to a lack of input validation.