CVE-2006-4671: Fscripts Fantastic News

Medium severity, CVSS 6.8. EPSS: 2.8% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[script_path] parameter, a different vector than CVE-2006-1154.

Affected products

• Fscripts Fantastic News: up to and including 2.1.4; version 2.1.1 only; version 2.1.2 only; version 2.1.3 only

Published 2006-09-11. Last modified 2026-06-16.