CVE-2018-1000094

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload -> copy to any extension.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2018-03-13

Last modified

2024-08-05

Weaknesses

CWE-434

Affected products

• Cms Made Simple (Cmsmadesimple)

References

• http://dev.cmsmadesimple.org/bug/view/11741
• https://www.exploit-db.com/exploits/44976/