CVE-2010-2313
Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS...
Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to index.php. NOTE: some of these details are obtained from third party information.
Exploit likelihood
What each source reports
NVD Score used
Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to index.php. NOTE: some of these details are obtained from third party information.
- Record
CVE-2010-2313- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-22
- Updated
- 2026-11-02
CVE List No score
Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to index.php. NOTE: some of these details are obtained from third party information.
- Record
CVE-2010-2313- Updated
- 2026-11-02
EUVDEUVD-2010-2323 No score
Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to index.php. NOTE: some of these details are obtained from third party information.
- Record
EUVD-2010-2323- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-53g7-wg5x-3j59 No score
Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS...
Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System (SMS) 2.6.10, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to index.php. NOTE: some of these details are obtained from third party information.
- Record
GHSA-53g7-wg5x-3j59- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | SIMM Management System (SMS) - Local File Inclusion | 2010-06-02 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2313 is a medium vulnerability (CVSS 6.8) in Anodyne-productions Simm Management System, published June 17, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.12%, the 92nd percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/59063
vupen.com/english/advisories/2010/1330
securityfocus.com/bid/40543
exploit-db.com/exploits/12848
secunia.com/advisories/40009
packetstormsecurity.org/1006-exploits/simm-lfi.txt
osvdb.org/65084
nvd.nist.gov/vuln/detail/CVE-2010-2313
github.com/advisories/GHSA-53g7-wg5x-3j59