Remote Code Execution Vulnerability in CMS Made Simple (CMSMS) File Unpack Operation

CVE-2018-10515 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

In CMS Made Simple (CMSMS) through 2.2.7, the "file unpack" operation in the admin dashboard contains a remote code execution vulnerability exploitable by an admin user because a .php file can be present in the extracted ZIP archive.

Learn more about our Cms Pen Testing.