A vulnerability classified as critical has been found in JumbaCMS Build 2. This affects an unknown part. The manipulation of the argument jcms_root_path leads to file inclusion.

This vulnerability is uniquely identified as CVE-2006-6635. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.