medium6.8Public exploit code
CVE-2006-6877
Directory traversal vulnerability in index.php in Matteo Lucarelli 3editor CMS 0.42 and earlier, when register_globals is enabled, allows remote attackers to i…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- 3editor CMS 0.42 - 'index.php' Local File Inclusion2006-12-22 · webapps · php · Verified
Impact
Directory traversal vulnerability in index.php in Matteo Lucarelli 3editor CMS 0.42 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) in the page parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Matteo Lucarelli | 3editor Cms | through 0.42 |