CVE-2006-2519: Low severity Phpwcms Phpwcms vulnerability

Published May 22, 2006

Updated

Directory traversal vulnerability in include/incext/spaw/spawcontrol.class.php in phpwcms 1.2.5-DEV allows remote attackers to include arbitrary local files via .. (dot dot) sequences in the spawroot parameter. NOTE: CVE analysis suggests that this issue is actually in SPAW Editor PHP Edition.

Affected Software

1 affected component

Phpwcms Phpwcms=1.2.5_dev

Event History

May 22, 2006

CVE Published

10:02 PM

May 23, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-2519?

CVE-2006-2519 is classified as a high severity vulnerability due to its potential to allow remote file inclusion.

How do I fix CVE-2006-2519?

To fix CVE-2006-2519, update to a patched version of phpwcms that addresses this directory traversal vulnerability.

What software is affected by CVE-2006-2519?

CVE-2006-2519 affects phpwcms version 1.2.5-DEV specifically.

Can CVE-2006-2519 be exploited remotely?

Yes, CVE-2006-2519 can be exploited remotely by attackers through crafted requests.

What kind of vulnerability is CVE-2006-2519?

CVE-2006-2519 is a directory traversal vulnerability that allows inclusion of arbitrary local files.