A path traversal vulnerability exists in Industrial Application Software IAS Canias ERP 8.03 within the iasRequestFileEvent function of the RMI Interface component. This vulnerability allows remote attackers to manipulate the m_strSourceFileName argument to access unauthorized files. The vulnerability has a medium severity with a CVSS score of 5.3. Public exploit code has been disclosed, but no vendor response or patch is currently available.