CVE-2011-0518

Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via the system parameter to index.php...

CVE-2011-0518

LotusCMS 3.0 Fraise is affected by a remote code execution vulnerability tied to its Router() function. An attacker can pass PHP code via the page parameter (or system parameter abuse) and trigger an eval/remote code execution through core/lib/router.php, allowing local file inclusion or code exe...

CVE-2011-0518

creationtimestamp| type| source ---|---|--- 2011-01-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15964 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/lcmsphpexec.rb 2025-02-06 03:13:40+00:00| seen|...