Design/Logic Flaw

In CMS Made Simple CMSMS 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in which type=image is changed to type=file...

PT-2017-11986

Name of the Vulnerable Software and Affected Versions CMS Made Simple CMSMS version 2.2.2 Description The issue allows remote authenticated administrators to upload a .php file. This can be achieved by performing a CMSContentManager action to "admin/moduleinterface.php", followed by a FilePicker...