SPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files.Referenceshttps://github.com/NoiseByNorthwest/php-spx/issues/251
