• info
• discussion
• exploit
• solution
• references

EZ Publish Multiple Path Disclosure Vulnerabilities

The following proof of concepts were provided:

http://[target]/kernel/class/delete.php
http://[target]/kernel/classes/ezrole.php