CVE-2006-1545

The CVE-2006-1545 entry concerns VNews 1.2 (vscripts) where a Direct static code injection vulnerability in admin/config.php lets remote authenticated administrators execute code by inserting PHP into variables stored in admin/config.php. The issue arises in a vulnerable component/file (admin/con...