CVE-2018-10523

CMS Made Simple (CMSMS) through 2.2.7 contains a physical path leakage Vulnerability via /modules/DesignManager/action.ajax_get_templates.php, /modules/DesignManager/action.ajax_get_stylesheets.php, /modules/FileManager/dunzip.php, or /modules/FileManager/untgz.php.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2018-04-27

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Cms Made Simple (Cmsmadesimple)

References

• https://github.com/itodaro/cmsms_cve/blob/master/README.md