RuubikCMS is prone to an information-disclosure vulnerability because it fails to sufficiently validate user-supplied data. An attacker can exploit this issue to download local files in the context of the webserver process. This may allow the attacker to obtain sensitive information other attacks are also possible. RuubikCMS 1.1.0 is vulnerable other versions may also be affected.

• http://www.ruubikcms.com
• http://www.securityfocus.com/bid/50165

---

Updated on 2015-03-25