XBMC <=11 Directory Traversal Exploit

This module can disclose remote files of XBMC servers running the HTTP service (default port 8080).

It at least passes msftidy, and will run.