Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

S-CMS 1.0 lets attackers read source files

CVE-2018-20478 · published 7 years ago
Summary

In S-CMS version 1.0, a flaw in the admin/download.php page lets anyone request files by using a mixed‑case file extension (for example, "download.Php"). This can expose internal PHP code and other sensitive files, giving outsiders insight into how the system works. Apply the vendor’s patch or restrict access to the download feature until the issue is fixed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
s-cms s-cms 1.0
cpe:2.3:a:s-cms:s-cms:1.0:*:*:*:*:*:*:*
Original advisory text
An issue was discovered in S-CMS 1.0. It allows reading certain files, such as PHP source code, via the admin/download.php DownName parameter with a mixed-case extension, as demonstrated by a DownN...
An issue was discovered in S-CMS 1.0. It allows reading certain files, such as PHP source code, via the admin/download.php DownName parameter with a mixed-case extension, as demonstrated by a DownName=download.Php value.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
1% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published26 Dec 2018
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-20478 · NVD
Track software like this
Free during beta