Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote malicious users to read arbitrary files via a .. (dot dot) in the olang parameter to (1) mail.php and (2) mailbar.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
quirm simple php newsletter 1.5 |