Mcnews : Security Vulnerabilities, CVEs,
PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the l parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2005-0720.
Max CVSS
7.5
EPSS Score
9.59%
Published
2005-05-02
Updated
2018-10-19
PHP remote file inclusion vulnerability in admin/header.php in PHP mcNews 1.3 allows remote attackers to execute arbitrary PHP code by modifying the skinfile parameter to reference a URL on a remote web server that contains the code.
Max CVSS
7.5
EPSS Score
4.17%
Published
2005-03-08
Updated
2018-10-19
2 vulnerabilities found