NuytsTech Security

CVE-2006-5100

by ·

PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews) 1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WN_BASEDIR parameter.

Date published : 2006-10-02

http://www.securityfocus.com/bid/20239

http://www.securityfocus.com/archive/1/446996/100/0/threaded

Tags: