PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CONFIG[script_path] variable. NOTE: 2.1.4 was also reported to be vulnerable.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2006-03-10 11:02
Updated : 2024-02-04 16:52
NVD link : CVE-2006-1154
Mitre link : CVE-2006-1154
CVE.ORG link : CVE-2006-1154
JSON object : View
Products Affected
fscripts
- fantastic_news
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')