QuiXplorer versions below 2.3 allow for full file disclosure and web server user read access due to a directory traversal vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34058/QuiXplorer23.txt
Source: https://packetstormsecurity.com/files/34058/QuiXplorer23.txt.html