CVE-2008-0654: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Azucar CMS 1.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the VIEW view parameter to 1 index.php, 2 html/sitio/index.php, or 3 src/sistema/vistas/template/tplinicio.php...

CVE-2006-6720: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin/indexsitios.php in Azucar CMS 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the VIEW parameter...