CVE-2010-1342

CVE-2010-1342 affects Direct News 4.10.2. It describes multiple remote file inclusion vulnerabilities when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via a URL parameter in either rootpath (admin/menu.php, library/lib.menu.php) or adminroot (admin/media/update...

CVE-2010-1342

Multiple PHP remote file inclusion vulnerabilities in Direct News 4.10.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 admin/menu.php and 2 library/lib.menu.php; and the adminroot parameter to 3...