| शीर्षक | Code Execution Vulnerability in CMS Made Simple V2.2.18 CMS Made Simple 2.2.18 Code Execution |
|---|
| विवरण | CMS Made Simple (https://www.cmsmadesimple.org/) is a content management system (CMS). The system supports role-based privilege management system, wizard-based installation and update mechanism, intelligent caching mechanism and so on.
CMS Made Simple v2.2.18 there is a post-authentication command execution vulnerability, the vulnerability location is:cmsms-2.2.18-install/admin/listusertags.php in the administrator's backend expansion part of the settings of user-defined tags, the system of the user to enter the $code field is not strictly filtered, resulting in the ability to customize the Dangerous php code, able to write php backdoor, attackers can use this vulnerability to achieve code execution vulnerabilities. |
|---|
| स्रोत | ⚠️ https://github.com/t34t/Code-Execution-Vulnerability-in-CMS-Made-Simple-V2.2.18 |
|---|
| उपयोगकर्ता | testvul (UID 58141) |
|---|
| सबमिशन | 14/11/2023 05:08 AM (3 साल पहले) |
|---|
| संयम | 18/11/2023 10:30 AM (4 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 101100 [CMS Made Simple 2.1.6 admin/editusertag.php CreateTagFunction/CallUserTag code अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|