Vulnerability in P-News

CVE-2006-5434

PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitrary PHP code via a URL in the pn_lang parameter.

EPSS: 0.026 (83.5th percentile) — read the EPSS interpretation.

Affected products

  • P-news — versions 1.16, 1.17
  • N/a — versions n/a

References