Vulnerabilities > CVE-2007-2325 - Remote File Include vulnerability in MyNewsGroups Include.PHP

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
mynewsgroup
critical
exploit available
NVD
Published: 2007-04-27
Updated: 2018-10-16

Summary

PHP remote file inclusion vulnerability in include.php in MyNewsGroups :) allows remote attackers to execute arbitrary PHP code via a URL in the myng_root parameter.

Vulnerable Configurations

Part Description Count
Application
Mynewsgroup
1

Exploit-Db

descriptionMyNewsGroups 0.6 Include.PHP Remote File Include Vulnerability. CVE-2007-2325. Webapps exploit for php platform
idEDB-ID:29899
last seen2016-02-03
modified2007-04-25
published2007-04-25
reporterAli and Saeid
sourcehttps://www.exploit-db.com/download/29899/
titleMyNewsGroups 0.6 Include.PHP Remote File Include Vulnerability

References