Lucene search
PRIOn knowledge basePRION:CVE-2017-11405HistoryJul 18, 2017 - 12:29 a.m.
Design/Logic Flaw
2017-07-1800:29:00
PRIOn knowledge base
www.prio-n.com
2
In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in which type=image is changed to type=file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cms_made_simple | eq | 2.2.2 |
Related
cve
cve
CVE-2017-11405
2022-10-03 16:23:04
nvd
nvd
CVE-2017-11405
2017-07-18 00:29:00
cvelist
cvelist
CVE-2017-11405
2022-10-03 16:23:04
openvas
openvas
CMS Made Simple <= 2.2.2 Upload Vulnerability
2017-08-15 00:00:00