CVE-2014-8722: Exposure of Sensitive Information to an Unauthorized Actor

GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to 1 data/users/ .xml, 2 backups/users/ .xml.bak, 3 data/other/authorization.xml, or 4 data/other/appid.xml...