CVE-2006-1793

high

Description

Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPath[path] parameter to (1) class.forumposts.php and (2) forumpollrenderer.php. NOTE: this issue is closely related to CVE-2006-0659.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1793

http://www.securityfocus.com/bid/16578

http://www.securityfocus.com/archive/1/424708

http://retrogod.altervista.org/runcms_13a_xpl.html

Details

Source: Mitre, NVD

Published: 2006-04-17

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.6

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

EPSS

EPSS: 0.03649