Vulnerability Details : CVE-2018-1000094

Public exploit exists!
CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload -> copy to any extension.
Published 2018-03-13 01:29:01
Updated 2019-03-19 18:10:01
Source MITRE
View at NVD,   CVE.org
Vulnerability category: Execute code

Products affected by CVE-2018-1000094

Exploit prediction scoring system (EPSS) score for CVE-2018-1000094

EPSS FAQ
77.28%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 98 %
Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2018-1000094

  • CMS Made Simple Authenticated RCE via File Upload/Copy
    Disclosure Date: 2018-07-03
    First seen: 2020-04-26
    exploit/multi/http/cmsms_upload_rename_rce
    CMS Made Simple allows an authenticated administrator to upload a file and rename it to have a .php extension. The file can then be executed by opening the URL of the file in the /uploads/ directory. This module has been successfully tested on CMS Made Simple versio

CVSS scores for CVE-2018-1000094

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
6.5
 MEDIUM AV:N/AC:L/Au:S/C:P/I:P/A:P
8.0
6.4
 NIST
7.2
 HIGH CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1.2
5.9
 NIST

CWE ids for CVE-2018-1000094

References for CVE-2018-1000094

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close