CVE-2010-1951

Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the DOCUMENTROOT parameter to 1 news.php, 2 submitComment.php, and 3 sqlConnect.php...

CVE-2010-1951

CVE-2010-1951 affects 60cycleCMS. The flaw is a directory traversal vulnerability in the DOCUMENT_ROOT parameter exploited by (1) news.php, (2) submitComment.php, and (3) sqlConnect.php, allowing remote attackers to include and execute local files. Root cause: directory traversal sequences enable...