| Package | Affected versions | Patched versions |
|---|---|---|
| slim simple login manager | = 1.0.0= 1.1.0= 1.2.0= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.2.5= 1.2.6= 1.3.0≤ 1.3.1 |
The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free