PoC Index85,100 CVEs with PoCs

CVE-2018-10518

MEDIUM 6.5EPSS 0.9%

In CMS Made Simple (CMSMS) through 2.2.7, the "file delete" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause DoS, exploitable by an admin user, because the attacker can remove all lib/ files in all directories.

CVSS v3.0 NVD
6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v2.0 NVD
8.5 HIGHAV:N/AC:L/Au:S/C:N/I:C/A:C
EPSS
0.95% chance of exploitation in the next 30 days, 61st percentile
Published
2018-04-27
Updated
2024-09-16

Proof-of-concept exploits (1)

References

Related