CVE-2006-1340: Cutephp Cutenews

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an invalid file path.

Affected products

• Cutephp Cutenews: up to and including 1.4.1; version 0.88 only; version 1.3 only; version 1.3.1 only; version 1.3.2 only; version 1.3.6 only; …

Published 2006-03-21. Last modified 2026-06-16.