Directory Traversal vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive information via the File Listing function.
https://packetstorm.news/files/id/189020
https://dhtmlx.com/docs/products/demoApps/dhtmlxFileExplorerDemo/