phpList <= 2.10.8 - Local File Inclusion Vulnerability

No description provided by source...

Directory traversal

Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when registerglobals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the SERVERConfigFile parameter to admin/index.php...