Security Advisory

CVE-2018-10518

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-04-27 18:00:00

Last updated 2024-09-16 20:36:54

Assigner mitre

State PUBLISHED

Description

In CMS Made Simple (CMSMS) through 2.2.7, the "file delete" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause DoS, exploitable by an admin user, because the attacker can remove all lib/ files in all directories.

← Browse all CVEs View on cve.org ↗