Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPath[path] parameter to (1) class.forumposts.php and (2) forumpollrenderer.php. NOTE: this issue is closely related to CVE-2006-0659.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Runcms | Runcms | * | 1.2 (including) |
| Runcms | Runcms | 1.1 (including) | 1.1 (including) |
| Runcms | Runcms | 1.1a (including) | 1.1a (including) |