Alkacon OpenCms “filePath” Cross-Site Scripting and File Disclosure

nnposter has discovered some vulnerabilities in Alkacon OpenCms, which can be exploited by malicious users to disclose potentially sensitive information and malicious people to conduct cross-site scripting attacks.
Be sure to check if your system is missing security updates or have insecure applications installed:http://secunia.com/software_inspector/