Vulnerability Description
In CMS Made Simple (CMSMS) through 2.2.7, the "file view" operation in the admin dashboard contains a sensitive information disclosure vulnerability, exploitable by ordinary users, because the product exposes unrestricted access to the PHP file_get_contents function.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cmsmadesimple | Cms Made Simple | <= 2.2.7 |
Related Weaknesses (CWE)
References
- https://github.com/itodaro/cmsms_cve/blob/master/README.mdExploitTechnical DescriptionThird Party Advisory
- https://github.com/itodaro/cmsms_cve/blob/master/README.mdExploitTechnical DescriptionThird Party Advisory
FAQ
What is CVE-2018-10522?
CVE-2018-10522 is a vulnerability with a CVSS score of 4.9 (MEDIUM). In CMS Made Simple (CMSMS) through 2.2.7, the "file view" operation in the admin dashboard contains a sensitive information disclosure vulnerability, exploitable by ordinary users, because the product...
How severe is CVE-2018-10522?
CVE-2018-10522 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-10522?
Check the references section above for vendor advisories and patch information. Affected products include: Cmsmadesimple Cms Made Simple.