Chokri Hammedii

**Name of the Vulnerable Software and Affected Versions** FoF Pretty Mail version 1.1.2 **Description** FoF Pretty Mail version 1.1.2 has a local file inclusion issue. Administrative users can include arbitrary server files in email templates. An attacker can exploit the template settings by inserting file inclusion payloads to read sensitive system files, such as `/etc/passwd`, during email generation. The vulnerability allows reading sensitive system files during email template processing. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.