CVE-2006-3050

CVE-2006-3050 affects SixCMS 6.0 and earlier versions up to 6.0.6patch2. A directory traversal flaw in detail.php can be exploited by supplying a template parameter containing a .. sequence and a trailing null byte (%00), allowing remote attackers to read arbitrary files. The NVD metrics indicate...

CVE-2006-3051

CVE-2006-3051 describes a cross-site scripting (XSS) flaw in SixCMS 6.0 and older builds before 6.0.6patch2. The vulnerability is in the list.php script where the page parameter can be manipulated to inject arbitrary script code or HTML. The impact is described as enabling execution of injected s...