CoreCVE
Back

MEDIUM

In CMS Made Simple (CMSMS) through 2.2.7, the "module remove" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause DoS, exploitable by an admin user, because the attacker can remove all lib/ files in all directories

Published Apr 27, 2018

Description

In CMS Made Simple (CMSMS) through 2.2.7, the "module remove" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause DoS, exploitable by an admin user, because the attacker can remove all lib/ files in all directories.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 27, 2018
Updated Sep 16, 2024
Reserved Apr 27, 2018
Link CVE-2018-10520
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-10520
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-10520