Remote file inclusion

PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CONFIGscriptpath variable. NOTE: 2.1.4 was also reported to be vulnerable...