CVE-2005-0860 Information

Description

PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code via the dir parameter to (1) article.php (2) authorall.php (3) comment.php (4) display.php or (5) displayall.php.

Reference

http://secunia.com/advisories/14669 http://securitytracker.com/id?1013487 http://www.securityfocus.com/bid/12855