Two security issues have been reported in Smart PHP Subscriber, which can be exploited by malicious people to disclose sensitive information.

1) The pwd.txt file is placed under the web root with improper access restrictions. This can be exploited to gain knowledge of the administrator's password.

2) The subscribe.txt file is placed under the web root with improper access restrictions. This can be exploited to disclose subscribers' names and e-mails.

Solution
Restrict web access to the "pwd.txt" and "subscribe.txt" files.

Provided and/or discovered by
1) ThE TiGeR 100
2) Milos Zivanovic

Changelog
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers