First published: Sun Oct 14 2007(Updated: )
CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
CMS Made Simple | =1.1.3.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-5444 is classified as a medium severity vulnerability due to its potential to disclose sensitive information.
To fix CVE-2007-5444, upgrade to a version of CMS Made Simple that is not affected by this vulnerability.
CVE-2007-5444 enables remote attackers to possibly obtain sensitive information such as the full file path on the server.
CVE-2007-5444 specifically affects CMS Made Simple version 1.1.3.1.
Yes, CVE-2007-5444 can potentially lead to further exploits if attackers gain knowledge of the server's directory structure.