CVE-2006-2250: Cutephp Cutenews

Medium severity, CVSS 6.4. EPSS: 1.4% chance of exploitation in the next 30 days.

CuteNews 1.4.1 allows remote attackers to obtain sensitive information via a direct request to (1) /inc/show.inc.php or (2) /inc/functions.inc.php, which reveal the path in an error message.

Affected products

• Cutephp Cutenews: version 1.4.1 only

Published 2006-05-09. Last modified 2026-06-16.