← Database

CVE-2003-1292

MEDIUM CVSS: 5.0 Published: 2003-12-31 Modified: 2026-06-16

Description

PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files via a URL in the pathtoashnews parameter to (1) ashnews.php and (2) ashheadlines.php.

Affected Platforms

Ashwebstudio Ashnews

Weakness Type

NVD-CWE-Other

References