TI-2003-00369 CVE-2003-0394 · GHSA-chqf-3xcg-g2xgobjects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code…Priority LOW 37objects.inc.php4 in BLNews 2.1.3 allows remote attackers to execute arbitrary PHP code via a Server[path] parameter that points to malicious code on an attacker-controlled web site.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02279 · Published 2003-06-10 · No fix listed