CVE-2020-26650

Vulnerability

AtomXCMS 2.0 contains an arbitrary file read vulnerability in /admin/dump.php. The script accepts a file GET parameter and includes it directly without sanitization or access control, allowing an attacker to read sensitive files from the server. The issue is documented in the project's issue tracker [1].

Exploitation

An attacker can exploit this by sending a crafted HTTP GET request to /admin/dump.php?file=/etc/passwd (or any other arbitrary file path) without requiring any authentication or prior user interaction. No special network position is needed beyond normal web access [1].

Impact

A successful attack leads to arbitrary file read, exposing system files such as /etc/passwd or application configuration files containing credentials and secrets. This can enable further compromise of the server and sensitive data disclosure [1].

Mitigation

No official fix has been published as of the disclosure date (October 2020). The project appears to be inactive or unmaintained. Users should consider removing or restricting access to /admin/dump.php and migrating away from AtomXCMS 2.0 to a supported alternative [1].