Security Advisory

CVE-2018-10083

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-04-13 05:00:00

Last updated 2024-09-17 02:56:33

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard via directory traversal sequences in the val parameter within a cmd=del request, because code under modules\FilePicker does not restrict the val parameter.

← Browse all CVEs View on cve.org ↗