Directory traversal

Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPathpath parameter to 1 class.forumposts.php and 2 forumpollrenderer.php. NOTE: this issue is closely related to CVE-2006-0659...

CVE-2006-1793

Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPathpath parameter to 1 class.forumposts.php and 2 forumpollrenderer.php. NOTE: this issue is closely related to CVE-2006-0659...

CVE-2006-1793

RunCMS 1.2 and earlier are affected by a directory traversal vulnerability in the bbPath[path] parameter of class.forumposts.php and forumpollrenderer.php, enabling remote attackers to read arbitrary files. Root cause is improper handling of the bbPath[path] input leading to traversal. No remedia...

Design/Logic Flaw

Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with registerglobals and allowurlfopen enabled, allow remote attackers to execute arbitrary code via the bbPathpath parameter in 1 class.forumposts.php and 2 forumpollrenderer.php...