Vulnerabilities > CVE-2005-0632 - Unspecified vulnerability in PHPnews 1.2.3/1.2.4

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
phpnews
nessus
exploit available
NVD
Published: 2005-03-01
Updated: 2024-11-20

Summary

PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to execute arbitrary PHP code via the path parameter.

Vulnerable Configurations

Part Description Count
Application
Phpnews
2

Exploit-Db

descriptionPHPNews 1.2.3/1.2.4 Auth.PHP Remote File Include Vulnerability. CVE-2005-0632. Webapps exploit for php platform
idEDB-ID:25180
last seen2016-02-03
modified2005-03-01
published2005-03-01
reportermozako
sourcehttps://www.exploit-db.com/download/25180/
titlePHPNews 1.2.3/1.2.4 - Auth.PHP Remote File Include Vulnerability

Nessus

NASL familyCGI abuses
NASL idPHPNEWS_REMOTE_INCLUDES.NASL
descriptionThe remote host is running PHPNews, an open source news application written in PHP. The installed version of PHPNews has a remote file include vulnerability in the script
last seen2020-06-01
modified2020-06-02
plugin id17247
published2005-03-02
reporterThis script is Copyright (C) 2005-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/17247
titlePHPNews auth.php path Parameter Remote File Inclusion

References