An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter.

Project Subscriptions

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Sat, 25 Jul 2026 05:00:00 +0000

Type Values Removed Values Added
Title Remote Information Disclosure via Source Parameter in MCMS v6.1.1

Wed, 22 Jul 2026 20:45:00 +0000

Type Values Removed Values Added
Title Remote Information Disclosure via Source Parameter in MCMS v6.1.1

Mon, 20 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-200
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 17 Jul 2026 21:00:00 +0000

Type Values Removed Values Added
Description An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter.
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-07-20T17:53:09.054Z

Reserved: 2026-06-08T00:00:00.000Z

Link: CVE-2026-52203

cve-icon Vulnrichment

Updated: 2026-07-20T17:53:03.280Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-25T04:45:03Z

Weaknesses