OBottle Arbitrary File Download Vulnerability

OBottle is a lighter, database-free blog. An arbitrary file download vulnerability exists in cg.php in OBottle version 2.0. An attacker can exploit this vulnerability to obtain sensitive information...