MySQLNewsEngine Affichearticles.PHP3 Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22431/info MySQLNewsEngine is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the...

mne-rfi.txt

Title : MySQLNewsEngine affichearticles.php3 Remote File Inc. Vuln. Author : Blaster, CanberX Contact : [email protected] | [email protected] Download : http://www.comscripts.com/jump.php?action=script&id=625 Vuln code : affichearticles.php3 $sigfile = $newsenginedir . "include/signature.inc";...

CVE-2007-0828

PHP remote file inclusion vulnerability in affichearticles.php3 in MySQLNewsEngine allows remote attackers to execute arbitrary PHP code via a URL in the newsenginedir parameter...