Description
PHP remote file inclusion vulnerability in noticias.php in MNews 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter.
References
- 2493 third-party-advisory
- 20061013 MNews <= 2.0 (noticias.php) Remote File Inclue Vulnerability mailing-list