PlaNet Concept planetNews allows remote malicious users to bypass authentication and execute arbitrary code via a direct request to news/admin/planetnews.php.
planet concept planetnews