CVE-2018-7448: Improper Neutralization of Special Elements used in an OS Command

Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote attackers to inject arbitrary PHP code via the "timezone" parameter in step 4 of a fresh installation procedure...

PT-2018-18077

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.1.6 Description A remote code execution issue exists, allowing attackers to inject arbitrary PHP code via the timezone parameter in step 4 of a fresh installation procedure, specifically in the...