VULNERABILITY INTELLIGENCE

CVE-2012-6064

CVSS score3.5 LOW

EPSS probability1.39%

CISA KEVNot currently listed

Published2012-12-03

Last modified2026-06-16

Description

Directory traversal vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) before 1.11.2.1 allows remote authenticated administrators to delete arbitrary files via a .. (dot dot) in the deld parameter. NOTE: this can be leveraged using CSRF (CVE-2012-5450) to allow remote attackers to delete arbitrary files.