By using XML External Entity document script can access local files and have them sent to remote site.
vulners.com/securityvulns/securityvulns:doc:8889
vulners.com/securityvulns/securityvulns:doc:8988