CVE-2010-1951: Multiple directory traversal vulnerabilities in 60cycleCMS allow remote attackers to include and execute ar...

Security readout for executives and security teams

CVE-2010-1951 describes a 60cycleCMS flaw where web requests can manipulate a DOCUMENT_ROOT parameter to reach files outside the intended path. If an old 60cycleCMS site is still online, this could let an attacker include and execute local files. The public record does not name fixed versions or a vendor patch. Likely limited to legacy 60cycleCMS deployments that still expose the named PHP files to the internet. The source bundle lists affected product details as n/a, so version-specific exposure cannot be determined from the provided evidence. Treat as urgent only where 60cycleCMS is confirmed online. The technology appears old and niche, but remote file inclusion with public exploit references can create serious compromise risk on forgotten legacy sites. Mitigation focus: Identify and retire any public 60cycleCMS deployments.; Check vendor or project guidance for any historical fixed release.; Restrict access to the named PHP files if the site cannot be retired..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.