A code injection vulnerability exists in NewsPortal. Upgrading to 0.37 fixes this flaw.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/46468/newsportal.txt
Source: https://packetstormsecurity.com/files/46468/newsportal.txt.html