system
Describe <CVE-2005-1876>.
user
What is <CVE-2005-1876>?
assistant
Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privileges to execute arbitrary PHP code via certain inputs that are injected into a template (.tpl) file..