CVE-2006-1545

2006-03-3011:00:00

mitre

www.cve.org

AI Score

6.8

Confidence

Low

EPSS

0.023

Percentile

89.8%

JSON

Direct static code injection vulnerability in admin/config.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variables that are stored in admin/config.php.

References

secunia.com/advisories/19435

www.evuln.com/vulns/112

www.osvdb.org/24276

www.securityfocus.com/archive/1/430674/100/0/threaded

www.vupen.com/english/advisories/2006/1173

exchange.xforce.ibmcloud.com/vulnerabilities/25531