S40 CMS 0.4.2 Path Traversal
Vulnerability Description
S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler. The p parameter is not properly sanitized, allowing attackers to traverse the file system and access arbitrary files outside the web root. This can be exploited remotely without authentication by appending traversal sequences and a null byte to bypass file extension checks.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-10009
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Osirys
References
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/s40_traversal.rb
- https://www.exploit-db.com/exploits/17129
- https://web.archive.org/web/20110613222630/http://y-osirys.com/security/exploits/id27
- https://web.archive.org/web/20120531114058/http://s40.biz/
- https://www.vulncheck.com/advisories/s40-cms-path-traversal
Affected Vendor
S40 CMS
View all reports →