The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file existence and file metadata) via unspecified vectors.
- http://securityreason.com/securityalert/2671
- https://www.exploit-db.com/exploits/3850
No PoCs found on GitHub currently.