file vulnerability