CVE-2007-0143

Published Jan 9, 2007 nune

Overview

CVE-2007-0143 is a known-severity vulnerability affecting nune news_script. It was published on January 9, 2007.

Technical Description

Multiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote attackers to execute arbitrary PHP code via a URL in the custom_admin_path parameter to (1) index.php or (2) archives.php.

Remediation

Check the references section for vendor advisories and patches from nune. Update news_script to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status

References

Ref osvdb.org/31208 Ref osvdb.org/31209 Ref secunia.com/advisories/23635 Ref www.securityfocus.com/archive/1/456242/100/0/threaded Ref www.vupen.com/english/advisories/2007/0078 Ref exchange.xforce.ibmcloud.com/vulnerabilities/31312 Ref www.exploit-db.com/exploits/3090 Ref osvdb.org/31208 Ref osvdb.org/31209 Ref secunia.com/advisories/23635

Frequently Asked Questions

What is CVE-2007-0143?

CVE-2007-0143 is a known-severity vulnerability affecting nune news_script. It was published on January 9, 2007.

How severe is CVE-2007-0143?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2007-0143?

How can CyberStrike help with CVE-2007-0143?

CyberStrike's AI-powered security agents can automatically detect CVE-2007-0143 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.