PT-2025-3468 · Cmsimple · Cmsimple

H4Ckr4V3N · Published 2024-12-26 · Updated 2025-01-28 · CVE-2024-57547

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions CMSimple version 5.16

Description The issue is related to insecure permissions in the file download functionality of the backup system, allowing a remote attacker to obtain sensitive information. This can be achieved through a crafted script that manipulates the download functionality of php backup files. The vulnerability is associated with incorrect permission assignment for a critical resource, which can enable an attacker to gain unauthorized access to protected information and execute arbitrary code.

Recommendations For CMSimple version 5.16, consider disabling the backup file download functionality until a patch is available to prevent exploitation. Restrict access to critical resources to minimize the risk of unauthorized information disclosure. Avoid using the vulnerable functionality to download php backup files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

BDU:2025-01235

CVE-2024-57547

Affected Products

Cmsimple

References · 7

• 🔥 https://github.com/h4ckr4v3n/cmsimple5.16_research/blob/main/CMSimple%205.16%20Remote%20Code%20Execution%20via%20backup%20file%20editing.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-57547 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-57547 · Security Note
• https://bdu.fstec.ru/vul/2025-01235 · Security Note
• https://twitter.com/CVEnew/status/1884183350493208803 · Twitter Post
• https://t.me/cvedetector/16548 · Telegram Post
• https://gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb · Note