Authenticated file disclosure via unrestricted readlog path

Local file inclusion in Zenitel AlphaWeb XE 11.2.3.10 allows remote authenticated users to read arbitrary local files over HTTP. The amc_uploads.php readlog action accepts an absolute path in the file parameter and returns the referenced file without restricting resolution to an intended directory. Administrative web access is required; the published request retrieves /etc/passwd and /etc/shadow, exposing account data and password hashes without altering files.