CVE-2006-0659

CVE-2006-0659 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with register_globals and allow_url_fopen enabled, allow remote attackers to execute arbitrary code via the bbPath[path] parameter in (1) class.forumposts.php and (2) forumpollrenderer.php.

Learn more about our Cms Pen Testing.