Fix - KCFinder Local File Disclosure
http://www.exploit-db.com/exploits/27597/