Amril Jafni Joehari

The issue allows remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) in the `p` parameter to the "index.php" endpoint.