Beveiligingsadvies
CVE-2005-1876
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privileges to execute arbitrary PHP code via certain inputs that are injected into a template (.tpl) file.