CVE-2006-5100

CVE-2006-5100 affects WEB//NEWS (aka webnews) 1.4 and earlier. The vulnerability is a PHP remote file inclusion in parse/parser.php that lets an attacker supply a URL via the WN_BASEDIR parameter and cause remote PHP code execution. Affected component is the webnews parser; root cause involves in...