What’s Vulnerable › Vulnerabilities

CVE-2006-1340

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-03-21 · updated 2026-06-16

Description

CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an invalid file path.

Affected products

• CutePHP.com CuteNews: through 1.4.1; 0.88, 1.3, 1.3.1, 1.3.2, 1.3.6, 1.4.0

References

• http://hamid.ir/security/cutenews.txt
• http://secunia.com/advisories/19289
• http://www.securityfocus.com/archive/1/428434/100/0/threaded
• http://www.securityfocus.com/bid/17152
• http://hamid.ir/security/cutenews.txt
• http://secunia.com/advisories/19289
• http://www.securityfocus.com/archive/1/428434/100/0/threaded
• http://www.securityfocus.com/bid/17152

Get alerted when CVE-2006-1340 or the next vulnerability affects your stack