← Database

CVE-2010-1951

MEDIUM CVSS: 6.8 Published: 2010-05-19 Modified: 2026-06-16

Description

Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the DOCUMENT_ROOT parameter to (1) news.php, (2) submitComment.php, and (3) sqlConnect.php.

Affected Platforms

60Cyclecms Project 60Cyclecms

Weakness Type

CWE-22

References