O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the…
O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character.