CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.Referenceshttps://github.com/CuppaCMS/CuppaCMS/issues/28
