There are few way to access content behind web root directory.
vulners.com/securityvulns/securityvulns:doc:12705
vulners.com/securityvulns/securityvulns:doc:12706