CVE-2007-2539
The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file existence and file metadata) via unspecified vectors.
Date published : 2007-05-08
http://www.securityfocus.com/bid/23819
http://www.securityfocus.com/archive/1/467665/100/0/threaded