CVE-2008-2650

CMSimple 3.1 is vulnerable to Local File Inclusion in cmsimple/cms.php when register_globals is enabled. An attacker can use a .. in the sl parameter to index.php to include and execute arbitrary local files, potentially enabling remote code execution by including adm.php and calling the upload a...

CVE-2008-2650

creationtimestamp| type| source ---|---|--- 2008-05-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5700...