Security Advisory
CVE-2007-2252
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. (dot dot) in the icodir parameter.