Path Traversal in 60cyclecms Project
CVE-2010-1951
Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the DOCUMENT_ROOT parameter to (1) news.php, (2) submitComment.php, and (3) sqlConnect.php.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.075 (93.8th percentile) — read the EPSS interpretation.
Affected products
- 60cyclecms_project 60cyclecms — versions 2.5.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
- cve@mitre.org (Exploit, exploit, Third Party Advisory, VDB Entry, x_refsource_EXPLOIT-DB)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Third Party Advisory, VDB Entry)
- cve@mitre.org (VDB Entry, vdb-entry, x_refsource_XF)