It's possible to access files and execute commands via scenario.
vulners.com/securityvulns/securityvulns:doc:24936