CVE-2018-7662: Couchcms Couch

Medium severity, CVSS 5.3. EPSS: 47.1% chance of exploitation in the next 30 days.

Couch through 2.0 allows remote attackers to discover the full path via a direct request to includes/mysql2i/mysql2i.func.php or addons/phpmailer/phpmailer.php.

Affected products

• Couchcms Couch: up to and including 2.0

Published 2018-03-04. Last modified 2026-06-17.