Beveiligingsadvies

CVE-2018-10515

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-04-27 18:00:00
Laatst bijgewerkt 2024-09-16 19:21:00
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

In CMS Made Simple (CMSMS) through 2.2.7, the "file unpack" operation in the admin dashboard contains a remote code execution vulnerability exploitable by an admin user because a .php file can be present in the extracted ZIP archive.