CVE-2006-6801: Undefined Security Weakness

PHP remote file inclusion vulnerability in misc.php in SH-News 0.93, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the newscfgpath parameter...