Published: 11/03/2019 Updated: 02/04/2019

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 410

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

class.showtime2_image.php in CMS Made Simple (CMSMS) prior to 2.2.10 does not ensure that a watermark file has a standard image file extension (GIF, JPG, JPEG, or PNG).

Vulnerable Product	Search on Vulmon	Subscribe to Product
cmsmadesimple cms made simple

#!/usr/bin/env python # Exploit Title: CMS Made Simple (authenticated) arbitrary file upload in Showtime2 module # Date: March 2019 # Exploit Author: Daniele Scanu @ Certimeter Group # Vendor Homepage: wwwcmsmadesimpleorg/ # Software Link: viewsvncmsmadesimpleorg/listingphp?repname=showtime2 # Version: Showtime2 module <= 36 ...

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## class MetasploitModule < Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::HttpClient include Msf::Exploit::FileDropper def initialize(info = {}) super(update_info(info, ...

A collection of Metasploit modules

This repo contains a collection of Metasploit modules Included modules Totaljs < 324 Directory Traversal (CVE-2019-8903) CMS Made Simple (CMSMS) Showtime2 < 363 File Upload RCE (CVE-2019-9692) Pimcore from 400 to 566 Unserialize RCE (CVE-2019-10867) Samsung SmartTV scanner How to Cloning the repo git clone githubcom/certimetergroup/metasploit-

CWE-434 https://forum.cmsmadesimple.org/viewtopic.php?f=1&t=80285 http://viewsvn.cmsmadesimple.org/diff.php?repname=showtime2&path=%2Ftrunk%2Flib%2Fclass.showtime2_image.php&rev=47 https://www.exploit-db.com/exploits/46546/http://packetstormsecurity.com/files/152269/CMS-Made-Simple-CMSMS-Showtime2-File-Upload-Remote-Command-Execution.html http://www.rapid7.com/db/modules/exploit/multi/http/cmsms_showtime2_rce https://www.exploit-db.com/exploits/46627/https://nvd.nist.gov https://github.com/certimetergroup/metasploit-modules https://www.exploit-db.com/exploits/46546

CVE-2019-9692

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect