Bug #8338 LFI in browser.php
http://tracker.modx.com/issues/8338