Directory Traversal in GleezCMS v1.2.0

Executive Summary

CVE-2026-117127 is a directory traversal vulnerability in Gleez CMS version 1.2.0. It allows remote attackers to read arbitrary files on the server by exploiting the action_serve function in media.php. The flaw occurs because user-supplied file parameters are passed directly to file operations without proper sanitization, enabling path traversal attacks using sequences like ../ to escape intended directories.

Useful 0 Not Useful 0

Detection Guidance

Check if your GleezCMS version is 1.2.0 or earlier by inspecting the version file or database. Monitor server logs for unusual file access patterns, especially requests containing '../' sequences in the media-serving route. Use tools like curl to test for path traversal by requesting sensitive files such as /media.php?file=../application/config/database.php.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow attackers to access sensitive files such as database credentials, configuration files, or password reset tokens. If exploited, it may lead to full application compromise, data breaches, or unauthorized system access. The impact depends on the exposed files and system configuration.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA if sensitive personal or health data is exposed. Unauthorized access to such data may result in legal penalties, fines, or reputational damage due to violations of data protection requirements.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade to the latest version of GleezCMS if available. If no update exists, restrict access to the media.php endpoint via firewall rules or web server configuration. Implement input validation to sanitize the file parameter in the action_serve function. Remove sensitive files from public directories and audit file permissions.

Useful 0 Not Useful 0