Is it possible for an attacker to see all files inside of /uploads?

[shikamaroxu]

This thread gave me an attack of paranoia, so I started researching this topic.
Now I’ll have more thoughts before going to sleep, nice