Wmcms
Monthly
Authenticated path traversal in WMCMS 4.446.1257 lets any user holding a low-privileged account read files outside the intended web directory by manipulating the path/file argument of /index.php, exposing source code, configuration, and credential material on the host. The flaw is network-reachable with no user interaction, and publicly available exploit code exists - a GitHub proof-of-concept repository dedicated to this exact build - so unpatched instances with weak, default, or shared credentials are the realistic targets. Impact is bounded to confidentiality (no write, no code execution, no availability effect), and our independent assessment rates this a moderate-risk, low-priority issue in practice because a valid session is a prerequisite.
Authenticated path traversal in WMCMS 4.446.1257 lets any user holding a low-privileged account read files outside the intended web directory by manipulating the path/file argument of /index.php, exposing source code, configuration, and credential material on the host. The flaw is network-reachable with no user interaction, and publicly available exploit code exists - a GitHub proof-of-concept repository dedicated to this exact build - so unpatched instances with weak, default, or shared credentials are the realistic targets. Impact is bounded to confidentiality (no write, no code execution, no availability effect), and our independent assessment rates this a moderate-risk, low-priority issue in practice because a valid session is a prerequisite.