An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter.
History

Mon, 03 Aug 2026 03:15:00 +0000

Type Values Removed Values Added
Title MCMS v6.1.1 Source Parameter Leaks Sensitive Information

Tue, 28 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Title MCMS v6.1.1 Source Parameter Leaks Sensitive Information

Sat, 25 Jul 2026 05:00:00 +0000

Type Values Removed Values Added
Title Remote Information Disclosure via Source Parameter in MCMS v6.1.1

Wed, 22 Jul 2026 20:45:00 +0000

Type Values Removed Values Added
Title Remote Information Disclosure via Source Parameter in MCMS v6.1.1

Mon, 20 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-200
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 17 Jul 2026 21:00:00 +0000

Type Values Removed Values Added
Description An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-07-17T00:00:00.000Z

Updated: 2026-07-20T17:53:09.054Z

Reserved: 2026-06-08T00:00:00.000Z

Link: CVE-2026-52203

cve-icon Vulnrichment

Updated: 2026-07-20T17:53:03.280Z

cve-icon NVD

No data.

cve-icon Redhat

No data.