PT-2018-9670

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions through 2.2.6 Description: The issue allows PHP object injection due to an unserialize call in the get data function of libclassesinternalclass.LoginOperations.php. A remote attacker can upload and execute code or...