Unrated severityNVD Advisory· Published Jan 20, 2011· Updated Apr 29, 2026
CVE-2011-0518
CVE-2011-0518
Description
Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via the system parameter to index.php.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.exploit-db.com/exploits/15964nvdExploit
- secunia.com/advisories/42835nvdVendor Advisory
- www.vupen.com/english/advisories/2011/0073nvdVendor Advisory
- osvdb.org/70409nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/64736nvd
News mentions
0No linked articles in our index yet.