CVE-2007-2252: Undefined Security Weakness

Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. dot dot in the icodir parameter...