VULNERABILITY INTELLIGENCE

CVE-2018-1000094

CVSS score7.2 HIGH

EPSS probability38.80%

CISA KEVNot currently listed

Published2018-03-13

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload -> copy to any extension.

Weakness classification

CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references

cve@mitre.org — Exploit, Issue Tracking, Vendor Advisory
cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry