/mod/file/actions/

• ../
• download.php
• upload.php