Design/Logic Flaw

2017-07-1800:29:00

PRIOn knowledge base

www.prio-n.com

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.3%

In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action to admin/moduleinterface.php.

CPENameOperatorVersion
cms_made_simpleeq2.2.2

CPE	Name	Operator	Version
	cms_made_simple	eq	2.2.2

References

www.yuesec.com/img/cccccve/CMSMadeSimple/upl0advul123/images/upload_vulnerability_yuesec.html