CVE-2020-10682

The Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file, as demonstrated by m1_files[] to admin/moduleinterface.php

published March 20, 2020

CVSS
—
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

The Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file, as demonstrated by m1_files[] to admin/moduleinterface.php. The file should be sent as application/octet-stream and contain PHP code (it need not be a valid JPEG file).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01964 · 80.2th percentile
Published
2020-03-20T03:39Z
EPSS history
Timeline
  • 20 MAR 03:39Z
    The Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file, as demonstrated by m1_files[] to admin/moduleinterface.php
    cvelistv5