CVE-2005-0800: Mcnews

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the l parameter to reference a URL on a remote web server that contains the code, a different vulnerability than CVE-2005-0720.

Affected products

• Mcnews Mcnews: version 1.0 only; version 1.1 only; version 1.1a only; version 1.2 only; version 1.3 only

Published 2005-05-02. Last modified 2026-06-16.