Description
Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T. 1.1.0 allows remote administrators to insert arbitrary PHP code into the config file, which is included other N.T. scripts.
References
- http://evuln.com/vulns/121/summary.html
- ADV-2006-1243 vdb-entry
- 24398 vdb-entry
- 20060419 [eVuln] N.T. Version 1.1.0 XSS and PHP Code Insertion Vulnerabilities mailing-list
- 19526 third-party-advisory
- nt-ticker-file-include(25639) vdb-entry
- 17387 vdb-entry