CVE-2018-7448

Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote attackers to inject arbitrary PHP code…

published February 26, 2018

CVSS
—
EPSS
13%
Percentile
96.2
In the wild
Unconfirmed
What it is

Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote attackers to inject arbitrary PHP code via the "timezone" parameter in step 4 of a fresh installation procedure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12759 · 96.2th percentile
Published
2018-02-26T17:00Z
EPSS history
Timeline
  • 26 FEB 17:00Z
    Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote attackers to inject arbitrary PHP code…
    cvelistv5