CVE-2006-3050: Six Offene Systeme GmbH Sixcms

Low severity, CVSS 2.6. EPSS: 3.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the template parameter.

Affected products

• Six Offene Systeme GmbH Sixcms: up to and including 6.0

Published 2006-06-16. Last modified 2026-06-16.