Arbitrary File Read Vulnerability in Xinhoo OA Office System fi***.php File

Xinhu OA office system is an open source online office system. Xinhao OA office system fi.php file contains arbitrary file reading vulnerability. An attacker can use this vulnerability to download arbitrary files and obtain sensitive information...