CVE-2006-0723: Reamday Enterprises Magic News Lite

Low severity, CVSS 2.6. EPSS: 1.6% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the php_script_path parameter.

Affected products

• Reamday Enterprises Magic News Lite: version 1.2.3 only

Published 2006-02-16. Last modified 2026-06-16.