CVE-2010-2945: Simone Rota Slim Simple Login Manager

Medium severity, CVSS 6.9. EPSS: 0.3% chance of exploitation in the next 30 days.

The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp.

Affected products

• Simone Rota Slim Simple Login Manager: up to and including 1.3.1; version 1.0.0 only; version 1.1.0 only; version 1.2.0 only; version 1.2.1 only; version 1.2.2 only; …

Published 2010-08-30. Last modified 2026-06-16.