CVE-2006-1793

HIGH 7.6CVE-2006-1793 · Published 17/04/2006 · updated 16/06/2026

In short

CVE-2006-1793 is a HIGH (CVSS 7.6) vulnerability affecting runcms (runcms).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
runcms runcms	`= 1.1= 1.1a≤ 1.2`	No fix yet

Description

Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPath[path] parameter to (1) class.forumposts.php and (2) forumpollrenderer.php. NOTE: this issue is closely related to CVE-2006-0659.

References

retrogod.altervista.org/runcms_13a_xpl.html · Exploit
securityfocus.com/archive/1/424708 · Exploit
securityfocus.com/bid/16578

More vulnerabilities in runcms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free