Props version 0.6.1 is susceptible to cross site scripting attack and allows an attacker the ability to see any file on the system due to flaws in glossary.php.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33229/props061.txt
Source: https://packetstormsecurity.com/files/33229/props061.txt.html