CVE-2017-11405

2022-10-0316:23:04

mitre

www.cve.org

cms made simple

authenticated administrators

file upload

remote code execution

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.3%

JSON

In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in which type=image is changed to type=file.