Pecio-Cms: Security Vulnerabilities
Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to (1) post.php, (2) article.php, (3) blog.php, or (4) home.php in pec_templates/nova-blue/.
CVSS Score
7.5
EPSS Score
0.014
Published
2010-09-03
Directory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the language parameter.
CVSS Score
5.0
EPSS Score
0.012
Published
2009-05-04