NEWSolved Lite "abs_path" Parameter Handling Remote PHP File Inclusion Vulnerability
Description
A vulnerability has been identified in NEWSolved Lite, which could be exploited by attackers to execute arbitrary commands. This flaw is due to input validation errors in various scripts (e.g. "newsscript_lyt.php") that fail to validate the "abs_path" parameter, which could be exploited by remote attackers to include malicious files and execute arbitrary commands with the privileges of the web server.
Vulnerable Products
Vulnerable Software: NEWSolved Lite version 1.9.3 and prior
