Pentaho <= 1.7.0.1062 xss and information disclosure

No description provided by source...