Description
Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.
Remediation
References
Related Vulnerabilities
Zenphoto Other Vulnerability (CVE-2006-2187)
WordPress Plugin Side Menu Lite-add sticky fixed buttons SQL Injection (2.2)
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2017-0367)
WordPress Plugin bodi0`s Bots visits counter Cross-Site Scripting (0.8.1)
WordPress Plugin Social Share Icons & Social Share Buttons Cross-Site Scripting (3.0.5)