EUVD-2006-5397

Malware in sbrugna...

CVE-2006-5412: Undefined Security Weakness

admin.php in PHP Outburst Easynews 4.4.1 and earlier, when registerglobals is enabled, allows remote attackers to bypass authentication, and gain the ability to execute arbitrary code, via the enloginid parameter...