CVE-2010-1951

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the DOCUMENT_ROOT parameter to (1) news.php, (2) submitComment.php, and (3) sqlConnect.php.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.exploit-db.com/exploits/12249Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/510721/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/39473Exploit, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/57873VDB Entry
http://www.exploit-db.com/exploits/12249Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/510721/100/0/threadedThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/39473Exploit, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/57873VDB Entry

Timeline

Published: May 19, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010