CuteNews <= 1.4.1 Directory Traversal Arbitrary File Access

Binary data 3279.prm...

CVE-2004-1660

PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP code via the cutepath parameter to 1 showarchives.php or 2 shownews.php...