info
discussion
exploit
solution
references
EZ Publish site.ini Information Disclosure Vulnerability
The following proof of concept was provided:
http://[target]/settings/site.ini
Privacy Statement
Copyright 2010, SecurityFocus