CVE-2010-2797

Published: Oct 8, 2010Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the default_cms_lang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different vulnerability than CVE-2008-5642.

Affected (57)

Products: Cmsmadesimple: Cms Made Simple

Cmsmadesimple

1 product

Cms Made Simple

Configuration A

57 vulnerable

Vulnerable Software	Affected Versions
Cmsmadesimple Cms Made Simple	Up to 1.6.8
Cmsmadesimple Cms Made Simple	Version 1.0.1
Cmsmadesimple Cms Made Simple	Version 1.0.2
Cmsmadesimple Cms Made Simple	Version 1.0.3
Cmsmadesimple Cms Made Simple	Version 1.0.4
Cmsmadesimple Cms Made Simple	Version 1.0.5
Cmsmadesimple Cms Made Simple	Version 1.0.6
Cmsmadesimple Cms Made Simple	Version 1.0.7
Cmsmadesimple Cms Made Simple	Version 1.0.8
Cmsmadesimple Cms Made Simple	Version 1.0
Cmsmadesimple Cms Made Simple	Version 1.0 beta1
Cmsmadesimple Cms Made Simple	Version 1.0 beta2
Cmsmadesimple Cms Made Simple	Version 1.0 beta3
Cmsmadesimple Cms Made Simple	Version 1.0 beta4
Cmsmadesimple Cms Made Simple	Version 1.0 beta5
Cmsmadesimple Cms Made Simple	Version 1.0 beta6
Cmsmadesimple Cms Made Simple	Version 1.1.1
Cmsmadesimple Cms Made Simple	Version 1.1.2
Cmsmadesimple Cms Made Simple	Version 1.1.3.1
Cmsmadesimple Cms Made Simple	Version 1.1.4.1
Cmsmadesimple Cms Made Simple	Version 1.1
Cmsmadesimple Cms Made Simple	Version 1.1 rc1
Cmsmadesimple Cms Made Simple	Version 1.1 rc2
Cmsmadesimple Cms Made Simple	Version 1.1 rc3
Cmsmadesimple Cms Made Simple	Version 1.2.1
Cmsmadesimple Cms Made Simple	Version 1.2.2
Cmsmadesimple Cms Made Simple	Version 1.2.3
Cmsmadesimple Cms Made Simple	Version 1.2.4
Cmsmadesimple Cms Made Simple	Version 1.2.5
Cmsmadesimple Cms Made Simple	Version 1.2
Cmsmadesimple Cms Made Simple	Version 1.2 beta1
Cmsmadesimple Cms Made Simple	Version 1.2 beta2
Cmsmadesimple Cms Made Simple	Version 1.2 beta3
Cmsmadesimple Cms Made Simple	Version 1.2 rc1
Cmsmadesimple Cms Made Simple	Version 1.3.1
Cmsmadesimple Cms Made Simple	Version 1.3
Cmsmadesimple Cms Made Simple	Version 1.3 beta1
Cmsmadesimple Cms Made Simple	Version 1.3 beta2
Cmsmadesimple Cms Made Simple	Version 1.4.1
Cmsmadesimple Cms Made Simple	Version 1.4
Cmsmadesimple Cms Made Simple	Version 1.4 beta1
Cmsmadesimple Cms Made Simple	Version 1.4 beta2
Cmsmadesimple Cms Made Simple	Version 1.5.1
Cmsmadesimple Cms Made Simple	Version 1.5.2
Cmsmadesimple Cms Made Simple	Version 1.5.3
Cmsmadesimple Cms Made Simple	Version 1.5.4
Cmsmadesimple Cms Made Simple	Version 1.5
Cmsmadesimple Cms Made Simple	Version 1.5 beta1
Cmsmadesimple Cms Made Simple	Version 1.6.1
Cmsmadesimple Cms Made Simple	Version 1.6.2
Cmsmadesimple Cms Made Simple	Version 1.6.3
Cmsmadesimple Cms Made Simple	Version 1.6.4
Cmsmadesimple Cms Made Simple	Version 1.6.5
Cmsmadesimple Cms Made Simple	Version 1.6.6
Cmsmadesimple Cms Made Simple	Version 1.6.7
Cmsmadesimple Cms Made Simple	Version 1.6
Cmsmadesimple Cms Made Simple	Version 1.7