CVE-2018-7448

HIGH

CMS Made Simple 2.1.6 - Remote Code Execution

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2018-7448 has a selected CVSS score of 7.5 (high); EIP currently links 1 catalogued exploit and 1 repository PoC.

Description

Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote attackers to inject arbitrary PHP code via the "timezone" parameter in step 4 of a fresh installation procedure.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Repository PoCs
1

Proofs of concept

2

Catalogued exploits

ExploitDBCMS Made Simple 2.1.6 - Remote Code ExecutionExploitDB exploitby Keerati T.Not analyzed1 file
ExploitDB
PoC details

Repository PoCs

GitHubb1d0ws/exploit-cve-2018-7448Repository PoCby b1d0ws1Not analyzed2 files

6.1 KiB

GitHub
PoC details

References

4