CVE-2018-20478 Path traversal in n/a

High 7.5 Published 26 Dec 2018 Updated 5 Aug 2024

Attackers can read sensitive files like PHP source code via the admin download parameter in S-CMS.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-20478?

CVE-2018-20478 is a high-severity path traversal vulnerability in n/a, published on 26 Dec 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue was discovered in S-CMS 1.0. It allows reading certain files, such as PHP source code, via the admin/download.php DownName parameter with a mixed-case extension, as demonstrated by a DownName=download.Php value.

Weakness: CWE-200

Which versions are affected by CVE-2018-20478?

It affects 1 product.

Products include S-Cms S-Cms.

How do I fix CVE-2018-20478?

No fix has been published for CVE-2018-20478 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2018-20478 being exploited?

There is no known exploitation of CVE-2018-20478 in the wild and no public exploit code.

Sources

Also known as GHSA-cvq5-wc6x-r47p.