A vulnerability has been identified in PHP-Sugar, which could be exploited by attackers to gain unauthorized access to arbitrary files on a vulnerable system. This issue is caused by an input validation error in the "test/index.php" script that does not validate the "t" parameter, which could be exploited to disclose the contents of arbitrary files.
Vulnerable Products
Vulnerable Software: PHP-Sugar version 0.80 and prior