TYPO3 prior to 4.5.4 allows Information Disclosure in the backend.
typo3 typo3
debian debian linux 5.0
debian debian linux 6.0