CVE-2018-10521: Malicious File Upload
In CMS Made Simple (CMSMS) through 2.2.7, the "file move" operation in the admin dashboard contains an arbitrary file movement vulnerability that can cause DoS, exploitable by an admin user, because config.php can be moved into an incorrect directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10521?
CVE-2018-10521 is classified as a high severity vulnerability due to its potential to cause denial of service.
Who is affected by CVE-2018-10521?
CVE-2018-10521 affects users of CMS Made Simple versions up to and including 2.2.7.
How do I fix CVE-2018-10521?
To fix CVE-2018-10521, you should upgrade to a version of CMS Made Simple that is higher than 2.2.7.
What type of vulnerability is CVE-2018-10521?
CVE-2018-10521 is an arbitrary file movement vulnerability that exposes the system to potential denial of service.
Can an attacker exploit CVE-2018-10521 remotely?
No, CVE-2018-10521 requires an admin user to be exploited, so it is not remotely exploitable.