CVE-2007-3136

CVE-2007-3136 affects newsSync 1.5.0rc6 via a PHP remote file inclusion vulnerability in inc/nuke_include.php. An attacker can supply a URL to newsSync_NUKE_PATH, enabling remote PHP code execution. The affected component is PHP on the newsSync server, with the root cause described as improper ha...