Php Evolution » News Evolution : Security Vulnerabilities, CVEs, Published In 2002 (File inclusion)
PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands via the neurl parameter to (1) backend.php, (2) screen.php, or (3) admin/modules/comment.php.
Max CVSS
7.5
EPSS Score
1.96%
Published
2002-12-31
Updated
2017-07-29
1 vulnerabilities found