webTareas path traversal vulnerability

webTareas is a Web-based open source collaboration tool. The product supports project management, bug tracking, content management and meeting management. webTareas version 2.0 has a path traversal vulnerability, which stems from the fact that the extpath parameter in general_serv .php is not properly implemented in the software and can be exploited to allow a malicious user to read arbitrary files.