NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion.
Published July 25, 2021.
Nchsoftware Ivm Attendant