By using local_files object it's possible to obtain local files list. Under some conditions it' possible ot retrieve file content.
vulners.com/securityvulns/securityvulns:doc:7266
vulners.com/securityvulns/securityvulns:doc:7293