Exploitation Summary
EIP tracks 4 public exploits for CVE-2018-1000094.
PoCs published by Mustafa Hasan, longhd05, duylonggg, including Metasploit module exploits/multi/http/cmsms_upload_rename_rce.
AI-analyzed exploit summary This exploit leverages an authenticated file upload vulnerability in CMS Made Simple 2.2.5 to upload a malicious PHP file, then copies it to a web-accessible directory for remote code execution.
Description
CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload -> copy to any extension.
Exploits (4)
This exploit leverages an authenticated file upload vulnerability in CMS Made Simple 2.2.5 to upload a malicious PHP file, then copies it to a web-accessible directory for remote code execution.
This repository contains a functional exploit for CVE-2018-1000094, an authenticated remote code execution vulnerability in CMS Made Simple 2.2.5. The exploit leverages file upload and copy mechanisms to achieve RCE via a crafted PHP payload.
This repository contains a functional exploit for CVE-2018-1000094, an authenticated remote code execution vulnerability in CMS Made Simple 2.2.5. The exploit leverages file upload and copy mechanisms to achieve RCE via a crafted PHP payload.
This Metasploit module exploits an authenticated file upload vulnerability in CMS Made Simple, allowing an attacker to upload a malicious file and rename it to a .php extension for remote code execution.
References (2)
Scores
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H