Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h4gq-g24g-w4pf

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload -> copy to any extension.

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload -> copy to any extension.

EPSS

Процентиль: 98%
0.54916
Средний

7.2 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.2
nvd
почти 8 лет назад

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload -> copy to any extension.

EPSS

Процентиль: 98%
0.54916
Средний

7.2 High

CVSS3

Дефекты

CWE-434