Description
PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the php_script_path parameter.
References
- magicnewslite-preview-file-include(24608) vdb-entry
- http://evuln.com/vulns/72/summary.html
- 18878 third-party-advisory
- 16660 vdb-entry
- ADV-2006-0603 vdb-entry
- 16665 vdb-entry