CVE Daily

CVE-2006-1154

PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 a...

High CVSS 7.5

Overview

PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CONFIG[script_path] variable. NOTE: 2.1.4 was also reported to be vulnerable.

CWE: CWE-94 Published: 2006-03-10T11:02:00.000
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.5 (HIGH)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags