PHP remote file inclusion vulnerability in scripts/news_page.php in Reamday Enterprises Magic News Pro 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the script_path parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Magic_news_pro | Reamday_enterprises | * | 1.0.3 (including) |