Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Lithium Cms Subscribe
Filtered by product Lithium Cms
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-5731 1 Lithium Cms 1 Lithium Cms 2017-10-18 6.4 MEDIUM N/A
Directory traversal vulnerability in classes/index.php in Lithium CMS 4.04c and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the siteconf[curl] parameter, as demonstrated by a POST to news/comment.php containing PHP code, which is stored under db/comments/news/ and included by classes/index.php.