iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal.