A vulnerability has been identified in phpSpamManager (phpSM), which could be exploited by attackers to gain unauthorized access to arbitrary files on a vulnerable system. This issue is due to an input validation error in the "body.php" script that does not validate the "filename" parameter, which could be exploited to display the contents of arbitrary files via directory traversal attacks.
Vulnerable Products
Vulnerable Software: phpSpamManager (phpSM) version 0.53dev and prior
