Unauthenticated directory listing via folder traversal

Path traversal in installed_emanual_list.html on affected Sharp and Toshiba Tec MFPs allows remote attackers to list directories. The page accepts traversal sequences in its folder parameter and resolves them outside the electronic-manual tree, exposing filesystem directory contents. No authentication is required, but the attacker must reach the printer network and know the otherwise undisclosed page and parameter.