SimpNews version 2.41.03 suffers from path disclosure vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/59600/simpnews24103-disclosure.txt
Source: https://packetstormsecurity.com/files/59600/simpnews24103-disclosure.txt.html