CVE-2018-1000094

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access…

published March 13, 2018

CVSS
—
EPSS
39%
Percentile
98.6
In the wild
Unconfirmed
What it is

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload -> copy to any extension.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.38802 · 98.6th percentile
Published
2018-03-13T01:00Z
EPSS history
Timeline
  • 13 MAR 01:00Z
    CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access…
    cvelistv5