Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot (".").
Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL.