It's possible to download file in known location or to determine location of cache by using htm files download or Web folders.
vulners.com/securityvulns/securityvulns:doc:3365
vulners.com/securityvulns/securityvulns:doc:3366