Title: CMME Multiple Remote Security Vulnerabilities
Severity: MODERATE
Description:
CMME (Content Management Made Easy) is a PHP-based content manager.
The application is prone to the following vulnerabilities:
1. An information-disclosure vulnerability may allow attackers to gain access to arbitrary local files. This issue occurs because of insufficient validation of the 'env' parameter of the 'index.php' script.
2. An information-disclosure vulnerability may allow attackers to download backup files stored on the webserver.
3. A privilege-escalation vulnerability may allow attackers to create arbitrary directories within the web root. This issue occurs because of insufficient validation of the 'env' parameter of the 'admin.php' script.
4. Multiple cross-site scripting vulnerabilities affect the 'statistics.php' script. In particular, these issues occur with the 'page' and 'year' parameters.
An attacker may leverage these issues to obtain potentially sensitive information, to create arbitrary directories within the web root, and to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
CMME 1.12 is vulnerable; other versions may also be affected.
Affected Products:
- CMME CMME 1.12
References:
- CMME: CMME Homepage