← All advisories

Medium severity4.9NVD Advisory· Published Jul 18, 2017· Updated Jun 17, 2026

CVE-2017-11404

CVE-2017-11404

Description

In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action to admin/moduleinterface.php.

Affected products

2

Cmsmadesimple/Cmsmadesimple
cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.2:*:*:*:*:*:*:*
Simple CMS/Simple CMSllm-fuzzy
Range: = 2.2.2

Patches

Vulnerability mechanics

References

1

www.yuesec.com/img/cccccve/CMSMadeSimple/upl0advul123/images/upload_vulnerability_yuesec.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.