Description
SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain link_date parameter to events.php, which reveals the path in an error message due to an unsupported argument type for the mktime function on Windows.
Remediation
References
Related Vulnerabilities
WordPress Plugin Integration of Moneybird for WooCommerce Cross-Site Scripting (2.1.1)
MyBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-16780)
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall SQL Injection (3.8.7)