CVE-2018-10086 (cms_made_simple)

Posted on 2018년 4월 13일2018년 4월 16일 by admin

CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary code execution vulnerability in the admin dashboard because the implementation uses "eval(‘function testfunction’.rand()" and it is possible to bypass certain restrictions on these "testfunction" functions.

Source: CVE-2018-10086 (cms_made_simple)

답글 남기기 응답 취소