Unscored CVE-2006-2033 EUVD-2006-2034GHSA-p882-9g2j-rpw4

PHP remote file inclusion vulnerability in Core CoreNews 2.0.1 and earlier allows remote authenticated users to execute arbitrary commands …

Published Apr 26, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in Core CoreNews 2.0.1 and earlier allows remote authenticated users to execute arbitrary commands via the show parameter. NOTE: this is a different vector than CVE-2006-1212, although it might be the same primary issue.

References

corenews-index-file-include(25979) vdb-entry
20060421 Advisory: CoreNews <= 2.0.1 Multiple Remote Vulnerabilities. mailing-list
http://www.nukedx.com/?getxpl=24
797 third-party-advisory
20060421 Advisory: CoreNews <= 2.0.1 Multiple Remote Vulnerabilities. mailing-list
17655 vdb-entry