Secunia Research has discovered a vulnerability in Blazix, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to a validation error of the filename extension supplied by the user in the URL. This can be exploited to retrieve the source code of JSP files from the server via specially crafted requests containing dot, space, and slash characters. Version 1.2.5 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45088/secunia-Blazix.txt
Source: https://packetstormsecurity.com/files/45088/secunia-Blazix.txt.html