CVE-2019-9692

class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, or PNG).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
VendorProductVersion
cmsmadesimplecms_made_simple
𝑥
< 2.2.10
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/152269/CMS-Made-Simple-CMSMS-Showtime2-File-Upload-Remote-Command-Execution.html
http://viewsvn.cmsmadesimple.org/diff.php?repname=showtime2&path=%2Ftrunk%2Flib%2Fclass.showtime2_image.php&rev=47
http://www.rapid7.com/db/modules/exploit/multi/http/cmsms_showtime2_rce
https://forum.cmsmadesimple.org/viewtopic.php?f=1&t=80285
https://www.exploit-db.com/exploits/46546/
https://www.exploit-db.com/exploits/46627/
http://packetstormsecurity.com/files/152269/CMS-Made-Simple-CMSMS-Showtime2-File-Upload-Remote-Command-Execution.html
http://viewsvn.cmsmadesimple.org/diff.php?repname=showtime2&path=%2Ftrunk%2Flib%2Fclass.showtime2_image.php&rev=47
http://www.rapid7.com/db/modules/exploit/multi/http/cmsms_showtime2_rce
https://forum.cmsmadesimple.org/viewtopic.php?f=1&t=80285
https://www.exploit-db.com/exploits/46546/
https://www.exploit-db.com/exploits/46627/