Album Streamer version 2.0 suffers from a directory traversal vulnerability.