ADbNewsSender "path_to_lang" Local File Inclusion Vulnerability
Description
A vulnerability has been identified in ADbNewsSender, which could be exploited by attackers to gain knowledge of sensitive information. This issue is caused by an input validation error in the "maillinglist/setup/step1.php.inc" script when processing the "path_to_lang" parameter, which could be exploited by attackers to include or disclose the contents of local files with the privileges of the web server.
Vulnerable Products
Vulnerable Software: ADbNewsSender version 1.5.5 and prior
