AINS function.inc.php path Parameter PHP Code Execution - Ver2 (CVE-2007-0570)

A code execution vulnerability has been reported in Johannes Gijsbers Ad Fundum Integratable News Script AINS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2007-0570

CVE-2007-0570 affects the Ad Fundum Integratable News Script (AINS) 0.02b. A PHP remote file inclusion flaw in the ains_path parameter can allow a remote attacker to execute arbitrary PHP code on the affected system. The underlying issue is ains_path accepting user-controllable input that is used...