Vulnerabilities > CVE-2006-5716 - Remote File Include vulnerability in Freenews 2.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
freenews
exploit available
NVD
Published: 2006-11-04
Updated: 2018-10-17

Summary

Directory traversal vulnerability in aff_news.php in FreeNews 2.1 allows remote attackers to include local files via a .. (dot dot) sequence in the chemin parameter, when the aff_news parameter is not set to "1."

Vulnerable Configurations

Part Description Count
Application
Freenews
1

Exploit-Db

descriptionFreenews 1.1 Aff_News.PHP Remote File Include Vulnerability. CVE-2006-5716 . Webapps exploit for php platform
idEDB-ID:28875
last seen2016-02-03
modified2006-10-30
published2006-10-30
reporterMoHaNdKo
sourcehttps://www.exploit-db.com/download/28875/
titleFreenews 1.1 Aff_News.PHP Remote File Include Vulnerability

References