CVE-2010-2313

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• SIMM Management System (SMS) - Local File Inclusion2010-06-02 · webapps · php · Verified

Impact

Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to index.php. NOTE: some of these details are obtained from third party information.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/65084
• http://packetstormsecurity.org/1006-exploits/simm-lfi.txt
• http://secunia.com/advisories/40009
• http://www.exploit-db.com/exploits/12848/
• http://www.securityfocus.com/bid/40543
• http://www.vupen.com/english/advisories/2010/1330
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59063
• http://osvdb.org/65084
• http://packetstormsecurity.org/1006-exploits/simm-lfi.txt
• http://secunia.com/advisories/40009
• http://www.exploit-db.com/exploits/12848/
• http://www.securityfocus.com/bid/40543
• http://www.vupen.com/english/advisories/2010/1330
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59063