PT-2018-9944
CVE-2018-10522
·
تاريخ النشر
2018-04-27
·
تاريخ التحديث
2018-05-24
الوصف من
CVSS 3.1
4.9
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
CMS Made Simple (CMSMS) versions prior to 2.2.8
Description:
The issue concerns a sensitive information disclosure problem in the admin dashboard's "file view" operation. This is due to the product exposing unrestricted access to the PHP
file get contents function, making it exploitable by ordinary users.Recommendations:
For CMS Made Simple (CMSMS) versions prior to 2.2.8, update to version 2.2.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin dashboard's "file view" operation to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾