CVE-2018-10520

In CMS Made Simple (CMSMS) through 2.2.7, the "module remove" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause…

published April 27, 2018

CVSS
—
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

In CMS Made Simple (CMSMS) through 2.2.7, the "module remove" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause DoS, exploitable by an admin user, because the attacker can remove all lib/ files in all directories.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00947 · 60.8th percentile
Published
2018-04-27T18:00Z
EPSS history
Timeline
  • 27 APR 18:00Z
    In CMS Made Simple (CMSMS) through 2.2.7, the "module remove" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause…
    cvelistv5