CVE-2006-4647

PHP remote file inclusion vulnerability in news.php in Sponge News 2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sndir parameter.

Date published : 2006-09-08

http://www.securityfocus.com/bid/19862

https://www.exploit-db.com/exploits/2309