Quirm » Simple Php Newsletter : Security Vulnerabilities, CVEs, (Directory traversal)
Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary files via a .. (dot dot) in the olang parameter to (1) mail.php and (2) mailbar.php.
Max CVSS
6.8
EPSS Score
0.56%
Published
2009-01-29
Updated
2017-09-29
1 vulnerabilities found