Vulnerability in Contenido Contendio

CVE-2006-5380

Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenido_path parameter to (1) cms/dbfs.php or (2) cms/front_content.php. NOTE: CVE disputes this issue for version 4.6.15, because $contenido_path is set to a static value

EPSS: 0.016 (72.8th percentile) — read the EPSS interpretation.

Affected products

Contenido Contendio — versions 4.6.15
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (mailing-list, Exploit, x_refsource_VIM)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_SREASON, third-party-advisory)