Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2020-10682
Description:The Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file, as demonstrated by m1_files[] to admin/moduleinterface.php. The file should be sent as application/octet-stream and contain PHP code (it need not be a valid JPEG file).
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2020-10682
http://dev.cmsmadesimple.org/bug/view/12275




© 1998-2025 E-Soft Inc. All rights reserved.