Immunity Canvas: PHPNEWS_INCLUDE

Name| phpnewsinclude ---|--- CVE| CVE-2007-4232 Exploit Pack| CANVAS Description| PHPNews 0.93 Remote Include Notes| Repeatability: Infinite VENDOR: crear.de CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4232 CVE Name: CVE-2007-4232...

CVE-2007-4232

The CVE-2007-4232 issue affects PHPNews 0.93 and is described as a PHP remote file inclusion vulnerability in admin/inc/change_action.php. The vulnerability allows an attacker to cause the application to execute arbitrary PHP code by supplying a crafted URL for the format_menue parameter, enablin...