PT-2023-12130 · Unknown · Cms Made Simple

Riccardo Krauter · Published 2023-05-08 · Updated 2025-01-29 · CVE-2021-28998

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions through 2.2.15

Description The issue allows remote authenticated attackers to gain a webshell via a crafted phar file. This is achieved through a file upload vulnerability.

Recommendations For versions through 2.2.15, update to a version later than 2.2.15 to resolve the issue. As a temporary workaround, consider restricting file uploads to minimize the risk of exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-28998

Affected Products

Cms Made Simple

References · 6

• 🔥 https://github.com/beerpwn/CVE/blob/master/cms_made_simple_2021/file_upload_RCE/File_upload_to_RCE.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-28998 · Security Note
• https://osv.dev/vulnerability/CVE-2021-28998 · Vendor Advisory
• https://t.me/cvenotify/108974 · Telegram Post
• https://t.me/cvenotify/49941 · Telegram Post
• https://seclists.org/fulldisclosure/2021/Mar/50 · Note