Directory traversal vulnerability in index.php in Aprox PHP Portal allows remote attackers to read arbitrary files via a full pathname in the show parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/15014
https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-0237
http://www.securityfocus.com/bid/9540