EUVD-2007-1150

Malware in sbrugna...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CutePHP CuteNews 1.3.6 allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: issue might overlap...

CVE-2006-4445

CVE-2006-4445 affects CuteNews 1.3.x. The vulnerability is described as PHP remote file inclusion via the cutepath parameter in show_news.php or search.php, potentially allowing remote code execution. Some sources note that CVE analysis as of 2006-08-29 did not identify concrete scenarios causing...