An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal.