| Título | CMS Made Simple 2.2.22 Remote Code Execution |
|---|
| Descripción | The system does not properly verify the content of image files, allowing attackers to upload image files containing malicious scripts. The uploaded malicious image files are stored in publicly accessible directories, and these scripts can then be accessed and executed through web browsers, enabling attackers to take full control of the server environment. |
|---|
| Fuente | ⚠️ https://github.com/feixuezhi/CMSMadeSimple/wiki/CMS-Made-Simple-Version:-2.2.22-%E2%80%90-Remote-Code-Execution |
|---|
| Usuario | feioklucy (UID 83820) |
|---|
| Sumisión | 2025-08-22 05:13 (hace 10 meses) |
|---|
| Moderación | 2025-09-09 18:10 (19 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 128117 [CMS Made Simple 2.2.8 File Upload SVG Document secuencias de comandos en sitios cruzados] |
|---|
| Puntos | 0 |
|---|