Description
SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain sensitive information via an certain link_date parameter to events.php, which reveals the path in an error message due to an unsupported argument type for the mktime function on Windows.
Remediation
References
Related Vulnerabilities
Resin Application Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2969)
WordPress Plugin JobSearch WP Job Board Cross-Site Scripting (1.5.2)
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2026-50522)
WordPress Plugin Widget Logic Cross-Site Request Forgery (5.10.2)