PHP Object Injection Vulnerability in CMS Made Simple by CMS Made Simple, Inc.
CVE-2018-10085

9.8CRITICAL

Key Information:

Vendor: Cmsmadesimple
Status: Cms Made Simple
Vendor: CVE Published:; 13 April 2018

🔔 Create Cmsmadesimple Vulnerability Alert

What is CVE-2018-10085?

CMS Made Simple versions up to 2.2.6 are susceptible to a PHP object injection vulnerability due to improper handling of user-supplied cookies. An attacker can exploit this flaw by sending specially crafted cookies to the system. This may allow for the remote uploading and execution of malicious code or the potential deletion of files, compromising the security and integrity of the affected CMS.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/itodaro/cve/blob/master/README.md

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Apr 13, 2018

JSON

Cmsmadesimple

What is CVE-2018-10085?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.