First published: Fri Sep 23 2011(Updated: )
CMS Made Simple (CMSMS) 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/TinyMCE/TinyMCE.module.php and certain other files. NOTE: this might overlap CVE-2007-5444.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
CMS Made Simple | =1.9.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-3718 is classified as a moderate severity vulnerability that exposes sensitive information.
To fix CVE-2011-3718, upgrade CMS Made Simple to a version later than 1.9.2 which addresses this vulnerability.
CVE-2011-3718 is an information disclosure vulnerability that allows attackers to obtain sensitive data.
CVE-2011-3718 affects CMS Made Simple version 1.9.2.
Exploiting CVE-2011-3718 can allow attackers to gain access to sensitive file paths that could aid in further attacks.