60cyclecms Project

60cyclecms

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2011-3696

Exploit
  • EPSS 0.32%
  • Published 23.09.2011 23:55:01
  • Last modified 11.04.2025 00:51:21

60cycleCMS 2.5.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by post.php and certain other files.

6.8

CVE-2010-1951

Exploit
  • EPSS 2.3%
  • Published 19.05.2010 12:07:52
  • Last modified 11.04.2025 00:51:21

Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the DOCUMENT_ROOT parameter to (1) news.php, (2) submitComment.php, and (3) sqlConnect...