Vulnerability in Newsphp

CVE-2003-0753

nphpd.php in newsPHP 216 and earlier allows remote attackers to read arbitrary files via a full pathname to the target file in the nphp_config[LangFile] parameter.

EPSS: 0.020 (79.2th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)