CVE-2018-10086: Code Injection

First published: Fri Apr 13 2018(Updated: )

CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary code execution vulnerability in the admin dashboard because the implementation uses "eval('function testfunction'.rand()" and it is possible to bypass certain restrictions on these "testfunction" functions.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/type
• agent/first-publish-date
• collector/mitre-cve
• source/MITRE
• agent/weakness
• agent/author
• agent/last-modified-date
• agent/references
• agent/severity
• agent/description
• agent/event
• agent/softwarecombine
• agent/tags
• vendor/cmsmadesimple
• canonical/cmsmadesimple cms made simple
• version/cmsmadesimple cms made simple/2.2.7