CVE-2004-1796

This is a writeup describing a Remote File Inclusion (RFI) vulnerability in HotNews 0.7.2. It provides the exploit URL but does not include functional exploit code or payload.

This exploit demonstrates a file inclusion vulnerability in HotNews, allowing remote attackers to execute arbitrary PHP scripts by manipulating the 'config[header]' parameter to include malicious files from an external server.

This exploit demonstrates a file inclusion vulnerability in HotNews, allowing remote attackers to execute arbitrary PHP scripts by manipulating the 'config[incdir]' parameter to include malicious files from an attacker-controlled server.