PT-2025-33078 · S40 Cms · S40 Cms

Published 2025-08-13 · Updated 2025-08-14 · CVE-2011-10009

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions: S40 CMS version 0.4.2

Description: S40 CMS version 0.4.2 contains a path traversal vulnerability in its index.php page handler. The p parameter is not properly sanitized, allowing attackers to traverse the file system and access arbitrary files outside the web root. This can be exploited remotely without authentication by appending traversal sequences and a null byte to bypass file extension checks.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2011-10009

Affected Products

S40 Cms

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2011-10009 · Security Note
• https://vulncheck.com/advisories/s40-cms-path-traversal · Note
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/s40_traversal.rb · Note
• https://t.me/cveNotify/132269 · Telegram Post
• https://t.me/CVEtracker/29925 · Telegram Post
• https://exploit-db.com/exploits/17129 · Note
• https://web.archive.org/web/20110613222630/http://y-osirys.com/security/exploits/id27 · Note
• https://web.archive.org/web/20120531114058/http://s40.biz · Note