← back
CVE-2006-1925

CVE-2006-1925

EPSS 1.8%
Directory traversal vulnerability in the editnews module (inc/editnews.mdu) in index.php in CuteNews 1.4.1 allows remote attackers to read or modify files via the source parameter in the (1) editnews or (2) doeditnews action. NOTE: this can also produce resultant XSS when the target file does not exist.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/27676unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://securityreason.com/securityalert/775https://exchange.xforce.ibmcloud.com/vulnerabilities/25935http://www.securityfocus.com/archive/1/431340/30/0/threadedhttp://www.securityfocus.com/archive/1/431528/100/0/threadedhttp://www.securityfocus.com/bid/17592