PT-2009-1634 · Cmme · Content Management Made Easy

Published 2009-02-18 · Updated 2018-10-11 · CVE-2008-6159

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Content Management Made Easy (CMME) version 1.19

Description The issue allows remote attackers to obtain system information by making a direct request to "info.php", which invokes the phpinfo function.

Recommendations For Content Management Made Easy (CMME) version 1.19, consider restricting access to the "info.php" file to prevent unauthorized disclosure of system information.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-6159

Affected Products

Content Management Made Easy

References · 5

• 🔥 http://bugreport.ir/index_55.htm · Exploit
• http://secunia.com/advisories/32169 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6159 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45703 · Note
• http://securityfocus.com/archive/1/497029/100/0/threaded · Note