CVE-2018-10522
EUVD-2018-259427.04.2018, 18:29
In CMS Made Simple (CMSMS) through 2.2.7, the "file view" operation in the admin dashboard contains a sensitive information disclosure vulnerability, exploitable by ordinary users, because the product exposes unrestricted access to the PHP file_get_contents function.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cmsmadesimple | cms_made_simple | 𝑥 ≤ 2.2.7 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration