CVE-2008-2341

Description

PHP remote file inclusion vulnerability in ch_readalso.php in News Manager 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the read_xml_include parameter.

Affected products

• avalonnet / news_manager2.0 – 2.0

References

• MISChttp://www.securityfocus.com/bid/29251
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/42459
• EXPLOIThttps://www.exploit-db.com/exploits/5624