Total vulnerabilities in the database
Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with register_globals and allow_url_fopen enabled, allow remote attackers to execute arbitrary code via the bbPath[path] parameter in (1) class.forumposts.php and (2) forumpollrenderer.php.
| Software | From | Fixed in |
|---|---|---|
| runcms / runcms | 1.1a | 1.1a.x |
| runcms / runcms | - | 1.2.x |
| runcms / runcms | 1.1 | 1.1.x |