CVE-2011-3718: Infoleak
CMS Made Simple (CMSMS) 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/TinyMCE/TinyMCE.module.php and certain other files. NOTE: this might overlap CVE-2007-5444.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3718?
CVE-2011-3718 is classified as a moderate severity vulnerability that exposes sensitive information.
How do I fix CVE-2011-3718?
To fix CVE-2011-3718, upgrade CMS Made Simple to a version later than 1.9.2 which addresses this vulnerability.
What type of vulnerability is CVE-2011-3718?
CVE-2011-3718 is an information disclosure vulnerability that allows attackers to obtain sensitive data.
Which software versions are affected by CVE-2011-3718?
CVE-2011-3718 affects CMS Made Simple version 1.9.2.
What are the consequences of exploiting CVE-2011-3718?
Exploiting CVE-2011-3718 can allow attackers to gain access to sensitive file paths that could aid in further attacks.