Textpattern 4.7.3 contains an aribtrary file load via the file_insert function in include/txp_file.php.
textpattern textpattern 4.7.3