Directory Traversal Vulnerability in phpwcms by phpwcms
CVE-2006-2519
Currently unrated
What is CVE-2006-2519?
A directory traversal vulnerability exists in the phpwcms content management system, specifically within the spaw_control.class.php file. By sending specially crafted requests with dot-dot sequences in the spaw_root parameter, remote attackers can manipulate the application to include arbitrary local files. This flaw underlines security risks associated with improper input validation in file inclusion mechanisms, which can potentially lead to unauthorized exposure of sensitive data or the execution of malicious scripts.