CVE-2003-0394

CVE-2003-0394 affects BLNews 2.1.3 where objects.inc.php4 is vulnerable to remote code execution via a Server[path] parameter pointing to attacker-controlled PHP code. The vulnerability enables an attacker to include remote PHP files, executing code with the web server’s privileges. Affected prod...