Security Advisory

CVE-2018-10520

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-04-27 18:00:00

Last updated 2024-09-16 17:32:48

Assigner mitre

State PUBLISHED

Description

In CMS Made Simple (CMSMS) through 2.2.7, the "module remove" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause DoS, exploitable by an admin user, because the attacker can remove all lib/ files in all directories.

← Browse all CVEs View on cve.org ↗