Back to search
CVE-2010-2797
Published: Oct 8, 2010
Modified: Sep 17, 2024
PUBLISHED
Description
Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the default_cms_lang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different vulnerability than CVE-2008-5642.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
[oss-security] 20100802 CVE request: cmsmadesimple < 1.8.1
mailing-list
x_refsource_MLIST
40031
third-party-advisory
x_refsource_SECUNIA
[oss-security] 20100802 Re: CVE request: cmsmadesimple < 1.8.1
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now