high7.5Public exploit code
CVE-2006-5434
PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitrary PHP code via a URL in the pn_lang pa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- P-News 1.16 - Remote File Inclusion2006-10-16 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitrary PHP code via a URL in the pn_lang parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| P-News | P-News | Versions 1.16, 1.17 |