CVE-2011-0518

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

15.83%

Published

Jan 20, 2011

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBLotus CMS Fraise 3.0 - Local File Inclusion / Remote Code Execution NucleiNuclei detection template

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via the system parameter to index.php.

Weaknesses (CWE)

CWE-22

Affected Products (1)

lotuscms · fraisevulnerable

References (10)

http://osvdb.org/70409

http://secunia.com/advisories/42835

Vendor Advisory

http://www.exploit-db.com/exploits/15964

Exploit

http://www.vupen.com/english/advisories/2011/0073

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/64736

http://osvdb.org/70409

http://secunia.com/advisories/42835

Vendor Advisory

http://www.exploit-db.com/exploits/15964

Exploit

http://www.vupen.com/english/advisories/2011/0073

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/64736

KEV Catalog EPSS Scores Vendors All CVEs