| Package | Affected versions | Patched versions |
|---|---|---|
| cmme | = 1.12 |
Multiple directory traversal vulnerabilities in Content Management Made Easy (CMME) 1.12 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the env parameter in a weblog action to index.php, or (2) create arbitrary directories via a .. (dot dot) in the env parameter in a login action to admin.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free