high7.5
CVE-2006-1576
Direct static code injection vulnerability in QLnews 1.2 allows remote authenticated administrators to execute arbitrary PHP code by modifying config.php.
Impact
Direct static code injection vulnerability in QLnews 1.2 allows remote authenticated administrators to execute arbitrary PHP code by modifying config.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vscripts.Pl | Qlnews | Version 1.2 |
References
- NVD record
- CVE.org record
- http://evuln.com/vulns/113/description.html
- http://secunia.com/advisories/19479
- http://www.osvdb.org/24291
- http://www.securityfocus.com/archive/1/430741/100/0/threaded
- http://www.securityfocus.com/bid/17335
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25548
- http://evuln.com/vulns/113/description.html
- http://secunia.com/advisories/19479
- http://www.osvdb.org/24291
- http://www.securityfocus.com/archive/1/430741/100/0/threaded
- http://www.securityfocus.com/bid/17335
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25548