PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the php_script_path parameter.
References
Configurations
History
No history.
Information
Published : 2006-02-16 11:02
Updated : 2026-06-16 22:21
NVD link : CVE-2006-0723
Mitre link : CVE-2006-0723
CVE.ORG link : CVE-2006-0723
JSON object : View
Products Affected
reamday_enterprises
- magic_news_lite
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
