CVE-2012-3588

CVE-2012-3588 corresponds to a directory traversal vulnerability in the WordPress Newsletter plugin (version 1.5) where the preview.php script fails to sanitize the data parameter, allowing remote attackers to read arbitrary files using .. in the data parameter. Multiple sources (WPScan, Tenable/...

CVE-2012-3588

Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the data parameter...