{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T12:53:31.457","vulnerabilities":[{"cve":{"id":"CVE-2018-1000535","sourceIdentifier":"cve@mitre.org","published":"2018-06-26T16:29:01.993","lastModified":"2026-06-17T01:32:51.770","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"lms version <= LMS_011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e."},{"lang":"es","value":"lms en versiones iguales o anteriores a la LMS_011123 contiene una vulnerabilidad de divulgación de archivos locales en la funcionalidad de lectura de archivos en el módulo LMS que puede resultar en la lectura de archivos en el servidor. Este ataque parece ser explotable mediante un parámetro GET. La vulnerabilidad parece haber sido solucionada tras el commit con ID 254765e."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lms:lms:*:*:*:*:*:*:*:*","versionEndIncluding":"011123","matchCriteriaId":"0569BA20-9B90-45F2-982F-AF8264E0CE3A"}]}]}],"references":[{"url":"https://0dd.zone/2018/06/01/LMS-Local-File-Disclosure/","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/lmsgit/lms/issues/1271","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"https://0dd.zone/2018/06/01/LMS-Local-File-Disclosure/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"https://github.com/lmsgit/lms/issues/1271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}}]}