CMS Made Simple up to 2.2.7 Admin Dashboard config.php unrestricted upload

Summaryinfo

A vulnerability was found in CMS Made Simple up to 2.2.7 and classified as problematic. Affected by this issue is some unknown functionality of the file config.php of the component Admin Dashboard. Executing a manipulation can lead to unrestricted upload. The identification of this vulnerability is CVE-2018-10521. The attack may be launched remotely. There is no exploit available.

Detailsinfo

A vulnerability has been found in CMS Made Simple up to 2.2.7 (Content Management System) and classified as problematic. This vulnerability affects an unknown code of the file config.php of the component Admin Dashboard. The manipulation with an unknown input leads to a unrestricted upload vulnerability. The CWE definition for the vulnerability is CWE-434. The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. As an impact it is known to affect integrity, and availability. CVE summarizes:

In CMS Made Simple (CMSMS) through 2.2.7, the "file move" operation in the admin dashboard contains an arbitrary file movement vulnerability that can cause DoS, exploitable by an admin user, because config.php can be moved into an incorrect directory.

The bug was discovered 04/27/2018. The weakness was shared 04/27/2018 (Website). The advisory is shared for download at github.com. This vulnerability was named CVE-2018-10521 since 04/27/2018. The exploitation appears to be easy. The attack can be initiated remotely. A single authentication is needed for exploitation. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1608.002.

By approaching the search of inurl:config.php it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-117178, VDB-117180, VDB-117179 and VDB-117181 are related to this item. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Content Management System

Name

• CMS Made Simple

Version

• 2.2.0
• 2.2.1
• 2.2.2
• 2.2.3
• 2.2.4
• 2.2.5
• 2.2.6
• 2.2.7

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion