Absolute path traversal vulnerability in ZeusCMS 0.3 and earlier might allow remote attackers to list arbitrary directories via a full pathname in the dir parameter.
- https://www.exploit-db.com/exploits/4798
No PoCs found on GitHub currently.