TI-2004-01672 CVE-2004-1796 · GHSA-rphj-cr7q-54vg
PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote…
Priority MEDIUM 45
PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP code via the (1) config[header] parameter to hotnews-engine.inc.php3 or (2) config[incdir] parameter t…