← Database

CVE-2006-1154

HIGH CVSS: 7.5 Published: 2006-03-10 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CONFIG[script_path] variable. NOTE: 2.1.4 was also reported to be vulnerable.

Affected Platforms

Fscripts Fantastic News

Weakness Type

CWE-94

References