CVE-2006-6462

PHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows remote attackers to execute arbitrary PHP code via a URL in the addpath parameter.

Date published : 2006-12-11

http://www.securityfocus.com/bid/21499

https://www.exploit-db.com/exploits/2897