PT-2019-19800 · Cms Made Simple · Cms Made Simple

Daniele Scanu · Published 2019-03-11 · Updated 2019-04-02 · CVE-2019-9692

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions prior to 2.2.10

Description The issue concerns the class.showtime2 image.php file in CMS Made Simple, where it fails to verify that a watermark file has a standard image file extension, such as GIF, JPG, JPEG, or PNG.

Recommendations For versions prior to 2.2.10, update to version 2.2.10 or later to resolve the issue.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2019-9692

Affected Products

Cms Made Simple

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cmsms_showtime2_rce.rb · Exploit
• 🔥 https://exploit-db.com/exploits/46546 · Exploit
• 🔥 http://packetstormsecurity.com/files/152269/CMS-Made-Simple-CMSMS-Showtime2-File-Upload-Remote-Command-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/46627 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-9692 · Security Note
• https://forum.cmsmadesimple.org/viewtopic.php?f=1&t=80285 · Vendor Advisory
• http://viewsvn.cmsmadesimple.org/diff.php?repname=showtime2&path=%2Ftrunk%2Flib%2Fclass.showtime2_image.php&rev=47 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-9692 · Vendor Advisory
• http://rapid7.com/db/modules/exploit/multi/http/cmsms_showtime2_rce · Note