CVE-2006-4637

ACGV News 0.9.1 contains multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code by providing a crafted URL in the PathNews parameter of either header.php or news.php. The issue stems from unsafely including remote files based on user-controlled inp...