CVE-2011-0518: Lotuscms Fraise

Medium severity, CVSS 5.1. EPSS: 15.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via the system parameter to index.php.

Affected products

• Lotuscms Fraise: version 3.0 only

Published 2011-01-20. Last modified 2026-06-16.