CVE-2006-4045: Torbstoff News

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in news.php in Torbstoff News 4 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter.

Affected products

• Torbstoff Torbstoff News: version 4 only

Published 2006-08-09. Last modified 2026-06-16.