Security Advisory
CVE-2007-2253
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php.