Vulnerabilities > CVE-2006-1545 - Unspecified vulnerability in Vscripts Vnews 1.2

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
vscripts
NVD
Published: 2006-03-30
Updated: 2024-11-21

Summary

Direct static code injection vulnerability in admin/config.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variables that are stored in admin/config.php.

Vulnerable Configurations

Part Description Count
Application
Vscripts
1

References