CVE-2006-6462: CM68 News

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows remote attackers to execute arbitrary PHP code via a URL in the addpath parameter.

Affected products

• CM68 News CM68 News: version 12.02.06 only

Published 2006-12-11. Last modified 2026-06-16.