CVE-2006-1662

Limbo CMS <1.0.4.2-1.0.4.1 - RCE

Title source: llm
STIX 2.1

Description

The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the Itemid parameter in index.php.

Exploits (2)

exploitdb WORKING POC VERIFIED
by sirh0t · webappsphp
https://www.exploit-db.com/exploits/1563
exploitdb WORKING POC VERIFIED
by str0ke · perlwebappsphp
https://www.exploit-db.com/exploits/1541

Scores

EPSS 0.1925
EPSS Percentile 95.4%

Details

Status published
Products (2)
limbo_cms/limbo_cms 1.0.4.1
limbo_cms/limbo_cms 1.0.4.2
Published Apr 07, 2006
Tracked Since Feb 18, 2026