mc-admin/post-edit.php in MiniCMS 1.10 allows full path disclosure via a modified id field.
1234n minicms 1.10