CVE-2015-6914: Mindbite Sitefactory CMS

High severity, CVSS 7.8. EPSS: 3.1% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in SiteFactory CMS 5.5.9 allows remote attackers to read arbitrary files via a full pathname in the file parameter to assets/download.aspx.

Affected products

• Mindbite Sitefactory CMS: version 5.5.9 only

Published 2015-09-11. Last modified 2026-06-17.