Lucene search

[email protected]CVE-2010-2797

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-2797

2022-10-0316:21:08

CWE-22

[email protected]

web.nvd.nist.gov

cve-2010-2797

directory traversal vulnerability

cms made simple

remote attackers

arbitrary execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.4%

JSON

Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the default_cms_lang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different vulnerability than CVE-2008-5642.

Affected configurations

NVD

Node

cmsmadesimplecms_made_simpleRange≤1.6.8

cmsmadesimplecms_made_simpleMatch1.0

cmsmadesimplecms_made_simpleMatch1.0beta1

cmsmadesimplecms_made_simpleMatch1.0beta2

cmsmadesimplecms_made_simpleMatch1.0beta3

cmsmadesimplecms_made_simpleMatch1.0beta4

cmsmadesimplecms_made_simpleMatch1.0beta5

cmsmadesimplecms_made_simpleMatch1.0beta6

cmsmadesimplecms_made_simpleMatch1.0.1

cmsmadesimplecms_made_simpleMatch1.0.2

cmsmadesimplecms_made_simpleMatch1.0.3

cmsmadesimplecms_made_simpleMatch1.0.4

cmsmadesimplecms_made_simpleMatch1.0.5

cmsmadesimplecms_made_simpleMatch1.0.6

cmsmadesimplecms_made_simpleMatch1.0.7

cmsmadesimplecms_made_simpleMatch1.0.8

cmsmadesimplecms_made_simpleMatch1.1

cmsmadesimplecms_made_simpleMatch1.1rc1

cmsmadesimplecms_made_simpleMatch1.1rc2

cmsmadesimplecms_made_simpleMatch1.1rc3

cmsmadesimplecms_made_simpleMatch1.1.1

cmsmadesimplecms_made_simpleMatch1.1.2

cmsmadesimplecms_made_simpleMatch1.1.3.1

cmsmadesimplecms_made_simpleMatch1.1.4.1

cmsmadesimplecms_made_simpleMatch1.2

cmsmadesimplecms_made_simpleMatch1.2beta1

cmsmadesimplecms_made_simpleMatch1.2beta2

cmsmadesimplecms_made_simpleMatch1.2beta3

cmsmadesimplecms_made_simpleMatch1.2rc1

cmsmadesimplecms_made_simpleMatch1.2.1

cmsmadesimplecms_made_simpleMatch1.2.2

cmsmadesimplecms_made_simpleMatch1.2.3

cmsmadesimplecms_made_simpleMatch1.2.4

cmsmadesimplecms_made_simpleMatch1.2.5

cmsmadesimplecms_made_simpleMatch1.3

cmsmadesimplecms_made_simpleMatch1.3beta1

cmsmadesimplecms_made_simpleMatch1.3beta2

cmsmadesimplecms_made_simpleMatch1.3.1

cmsmadesimplecms_made_simpleMatch1.4

cmsmadesimplecms_made_simpleMatch1.4beta1

cmsmadesimplecms_made_simpleMatch1.4beta2

cmsmadesimplecms_made_simpleMatch1.4.1

cmsmadesimplecms_made_simpleMatch1.5

cmsmadesimplecms_made_simpleMatch1.5beta1

cmsmadesimplecms_made_simpleMatch1.5.1

cmsmadesimplecms_made_simpleMatch1.5.2

cmsmadesimplecms_made_simpleMatch1.5.3

cmsmadesimplecms_made_simpleMatch1.5.4

cmsmadesimplecms_made_simpleMatch1.6

cmsmadesimplecms_made_simpleMatch1.6.1

cmsmadesimplecms_made_simpleMatch1.6.2

cmsmadesimplecms_made_simpleMatch1.6.3

cmsmadesimplecms_made_simpleMatch1.6.4

cmsmadesimplecms_made_simpleMatch1.6.5

cmsmadesimplecms_made_simpleMatch1.6.6

cmsmadesimplecms_made_simpleMatch1.6.7

cmsmadesimplecms_made_simpleMatch1.7

CPENameOperatorVersion
cmsmadesimple:cms_made_simplecmsmadesimple cms made simplele1.6.8
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq1.0
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq1.0.1
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq1.0.2
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq1.0.3
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq1.0.4
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq1.0.5
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq1.0.6
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq1.0.7
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq1.0.8

CPE	Name	Operator	Version
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	le	1.6.8
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	1.0
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	1.0.1
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	1.0.2
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	1.0.3
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	1.0.4
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	1.0.5
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	1.0.6
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	1.0.7
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	1.0.8