CVE-2007-4873

SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control, enabling remote retrieval of arbitrary .inc files via direct requests (example: admin/includes/dbtables.inc). Root cause: information disclosure in PHP-based system; impact: partial confidentiality ...

simpnews24103-fdisclose.txt

netVigilance Security Advisory 69 SimpNews version 2.41.03 File Content Disclosure Vulnerability Description: SimpNews is a news system written in PHP. Features: Data stored in MySQL, admin interface, support for multiple languages, support for multiple instances in one database, own header,...