CVE-2006-4285: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in news.php in Fantastic News 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGscriptpath parameter. NOTE: it was later reported that 2.1.5 is also affected...

Remote file inclusion

PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CONFIGscriptpath variable. NOTE: 2.1.4 was also reported to be vulnerable...

CVE-2006-1154: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CONFIGscriptpath variable. NOTE: 2.1.4 was also reported to be vulnerable...