{"api_version":"1","generated_at":"2026-07-24T18:40:27+00:00","cve":"CVE-2010-2797","urls":{"html":"https://cve.report/CVE-2010-2797","api":"https://cve.report/api/cve/CVE-2010-2797.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-2797","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-2797"},"summary":{"title":"CVE-2010-2797","description":"Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the default_cms_lang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different vulnerability than CVE-2008-5642.","state":"PUBLISHED","assigner":"redhat","published_at":"2010-10-08 21:00:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.cmsmadesimple.org/2010/07/3/announcing-cms-made-simple-1-8-1-mankara/","name":"http://www.cmsmadesimple.org/2010/07/3/announcing-cms-made-simple-1-8-1-mankara/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Announcing CMS Made Simple 1.8.1 - Mankara - CMS Made Simple","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/40031","name":"http://secunia.com/advisories/40031","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"CMS Made Simple Multiple Vulnerabilities - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://cross-site-scripting.blogspot.com/2010/07/cms-made-simple-18-local-file-inclusion.html","name":"http://cross-site-scripting.blogspot.com/2010/07/cms-made-simple-18-local-file-inclusion.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"XSS - Cross-Site Scripting: CMS Made Simple 1.8 Local File Inclusion","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2010/08/02/8","name":"http://www.openwall.com/lists/oss-security/2010/08/02/8","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE request: cmsmadesimple < 1.8.1","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2010/08/01/2","name":"http://www.openwall.com/lists/oss-security/2010/08/01/2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - CVE request: cmsmadesimple < 1.8.1","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2797","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2797","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0","cpe7":"beta2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0","cpe7":"beta3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0","cpe7":"beta4","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0","cpe7":"beta5","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0","cpe7":"beta6","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.1","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.1","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.1","cpe7":"rc3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.1.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.1.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.2","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.2","cpe7":"beta2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.2","cpe7":"beta3","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.2","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.3","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.3","cpe7":"beta2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.4","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.4","cpe7":"beta2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.5","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.6.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.6.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.6.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2797","vulnerable":"1","versionEndIncluding":"1.6.8","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cmsmadesimple","cpe5":"cms_made_simple","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T02:46:48.535Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.cmsmadesimple.org/2010/07/3/announcing-cms-made-simple-1-8-1-mankara/"},{"name":"[oss-security] 20100802 CVE request: cmsmadesimple < 1.8.1","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2010/08/01/2"},{"name":"40031","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/40031"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://cross-site-scripting.blogspot.com/2010/07/cms-made-simple-18-local-file-inclusion.html"},{"name":"[oss-security] 20100802 Re: CVE request: cmsmadesimple < 1.8.1","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2010/08/02/8"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the default_cms_lang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different vulnerability than CVE-2008-5642."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2010-10-08T20:00:00.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www.cmsmadesimple.org/2010/07/3/announcing-cms-made-simple-1-8-1-mankara/"},{"name":"[oss-security] 20100802 CVE request: cmsmadesimple < 1.8.1","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2010/08/01/2"},{"name":"40031","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/40031"},{"tags":["x_refsource_MISC"],"url":"http://cross-site-scripting.blogspot.com/2010/07/cms-made-simple-18-local-file-inclusion.html"},{"name":"[oss-security] 20100802 Re: CVE request: cmsmadesimple < 1.8.1","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2010/08/02/8"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert@redhat.com","ID":"CVE-2010-2797","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the default_cms_lang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different vulnerability than CVE-2008-5642."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://www.cmsmadesimple.org/2010/07/3/announcing-cms-made-simple-1-8-1-mankara/","refsource":"CONFIRM","url":"http://www.cmsmadesimple.org/2010/07/3/announcing-cms-made-simple-1-8-1-mankara/"},{"name":"[oss-security] 20100802 CVE request: cmsmadesimple < 1.8.1","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2010/08/01/2"},{"name":"40031","refsource":"SECUNIA","url":"http://secunia.com/advisories/40031"},{"name":"http://cross-site-scripting.blogspot.com/2010/07/cms-made-simple-18-local-file-inclusion.html","refsource":"MISC","url":"http://cross-site-scripting.blogspot.com/2010/07/cms-made-simple-18-local-file-inclusion.html"},{"name":"[oss-security] 20100802 Re: CVE request: cmsmadesimple < 1.8.1","refsource":"MLIST","url":"http://www.openwall.com/lists/oss-security/2010/08/02/8"}]}}}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2010-2797","datePublished":"2010-10-08T20:00:00.000Z","dateReserved":"2010-07-22T00:00:00.000Z","dateUpdated":"2024-09-17T02:53:33.918Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-10-08 21:00:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.8","matchCriteriaId":"A3EA8EC0-8ADB-4332-9989-30C6E16B4FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0:*:*:*:*:*:*:*","matchCriteriaId":"43F7E5BD-553E-4731-BED1-7E7DB772AD82"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5CF35F3A-634C-4C36-B3E6-F1208F9D01F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0:beta2:*:*:*:*:*:*","matchCriteriaId":"0349FD9D-06E4-4B17-8360-003111D16A22"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0:beta3:*:*:*:*:*:*","matchCriteriaId":"E2D0D697-D088-40B1-8D80-B881A7530006"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0:beta4:*:*:*:*:*:*","matchCriteriaId":"7F29A39F-4D8A-4683-8561-8C77B17005F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0:beta5:*:*:*:*:*:*","matchCriteriaId":"E6C93E33-ABC4-434F-AF93-F8F697D5D62A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0:beta6:*:*:*:*:*:*","matchCriteriaId":"36B57E13-2F90-49DD-988F-8A7F776536ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F4BF3B2C-1909-4CCF-A487-6378615D6A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AD2946B5-8AAF-4386-8C31-7D291C31BB7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5AB06C16-336C-4D85-84F6-24F079A2B144"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4FB1C531-AA30-4B89-A8BF-744B053B4983"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD0AE7F4-49F8-443A-9C8F-2F1C42F46713"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0203A997-A077-4A8A-A3FE-CA9D10FF43AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A5AAB099-B114-4A99-B086-9BA7866D4E7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"942BF218-1898-4135-9CA9-FAE4F091C883"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1:*:*:*:*:*:*:*","matchCriteriaId":"574E610A-4799-45C9-B005-C1593B033AD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1:rc1:*:*:*:*:*:*","matchCriteriaId":"ACB091A6-5B3A-4C2B-9CD8-3C59549772EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1:rc2:*:*:*:*:*:*","matchCriteriaId":"ABDA3920-B609-491E-858B-5D9CBC7F1955"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1:rc3:*:*:*:*:*:*","matchCriteriaId":"8089FEC3-3E01-4D8E-BACB-6A42781D5151"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3F3B9680-3A66-4508-A318-B9B348FDC222"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"9BDADD27-8249-4DE3-A2B5-EE1A3AD73F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"87178F45-424A-47D8-BEA5-B8371B722CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"49DE10A7-9BC6-4B33-97FC-5FEB44AEAFBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A2FA0450-91E6-4250-A1D1-F2CFBB74A5B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2:beta1:*:*:*:*:*:*","matchCriteriaId":"6A607317-26A0-431B-AC83-2637CD2C5561"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2:beta2:*:*:*:*:*:*","matchCriteriaId":"CD8C48F5-844F-425D-A577-C0D6D3037F76"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2:beta3:*:*:*:*:*:*","matchCriteriaId":"29389D5B-96DA-4889-AE13-848CD959414C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"7A575B72-7763-4BA4-A1BF-96B31203479A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"98D93656-A4D2-44C4-82EC-55C8BE1A7304"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"BAEAE47F-5A26-474E-8F7F-72976A8FEBA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E188A80A-980F-4AD8-B3B8-21D303121F35"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E730A3A8-8A60-4CC5-B167-26984DE0DA3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"FA19F5B2-7C5C-43DD-85ED-E2CD4EF6E748"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.3:*:*:*:*:*:*:*","matchCriteriaId":"778E5678-B763-415E-AA35-EF644E7A2CD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.3:beta1:*:*:*:*:*:*","matchCriteriaId":"7DEC1EBC-1DBA-4350-8B34-7A872C62B6BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.3:beta2:*:*:*:*:*:*","matchCriteriaId":"078B102C-748B-4847-8413-71659982AF01"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"91C39415-8F99-45FB-BE00-1888901BB4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.4:*:*:*:*:*:*:*","matchCriteriaId":"8F8649F4-1A33-41AE-888F-2D6BB19BCB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.4:beta1:*:*:*:*:*:*","matchCriteriaId":"F6D11F61-8D0C-4545-9193-370D6D01ECB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.4:beta2:*:*:*:*:*:*","matchCriteriaId":"60F2A706-CBF1-42F5-AC04-E68C1981CCB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"2DC37F28-C58A-4492-A107-4348ECE9AAFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.5:*:*:*:*:*:*:*","matchCriteriaId":"206B72EC-895E-4DA0-B41B-AAE41E53C108"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.5:beta1:*:*:*:*:*:*","matchCriteriaId":"A46A8B81-2D8D-431A-832A-4517E9616B92"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"CC131029-CE9C-437E-B3D3-7924062E14D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"AF34A817-09AC-4C7E-916B-1B158C5EE599"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"20E8FFE1-9431-4146-AFD3-5491F5FE3C23"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C1016173-D980-4909-86C0-81C94711FE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6:*:*:*:*:*:*:*","matchCriteriaId":"068BF668-9626-4CA4-A401-1946DCF916AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DA029BD9-1025-4802-BAE2-BEE218715FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"9928102A-27E2-4604-93F4-318BA7CDCAFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F1EECFB4-7001-411F-BBAE-BABD5248E4B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"40C6F2FA-0518-4B2A-9F05-51897A16AF6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"A35145EB-E7A7-48EC-91A9-9D423F316712"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.6:*:*:*:*:*:*:*","matchCriteriaId":"589C199E-12F9-41CF-BFE0-4B952B773460"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.6.7:*:*:*:*:*:*:*","matchCriteriaId":"7BB9992D-2EF4-4DBF-898A-6284A074403E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cmsmadesimple:cms_made_simple:1.7:*:*:*:*:*:*:*","matchCriteriaId":"2F14D3BD-5835-4206-BE44-72F31F46D067"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"2797","Ordinal":"1","Title":"CVE-2010-2797","CVE":"CVE-2010-2797","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"2797","Ordinal":"1","NoteData":"Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the default_cms_lang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different vulnerability than CVE-2008-5642.","Type":"Description","Title":"CVE-2010-2797"},{"CveYear":"2010","CveId":"2797","Ordinal":"2","NoteData":"2010-10-08","Type":"Other","Title":"Published"}]}}}