CMS Made Simple v2.2.15 was discovered to contain a Remote Command Execution (RCE) vulnerability via the upload avatar function. This vulnerability is exploited via a crafted image file.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| http://dev.cmsmadesimple.org/bug/view/12502 |
Configurations
No configuration.
Information
Published : 2022-02-28 23:15
Updated : 2022-02-28 23:15
NVD link : CVE-2022-23906
Mitre link : CVE-2022-23906
JSON object : View
Products Affected
No product.
CWE
No CWE.