CVE-2017-16798 In CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin

What is CVE-2017-16798?

CVE-2017-16798 is a medium-severity vulnerability in Cmsmadesimple Cms Made Simple, published on 12 Nov 2017.

Official description

In CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin or end with a "php" substring, which allows remote attackers to bypass intended access restrictions or trigger XSS via other extensions, as demonstrated by .phtml, .pht, .html, or .svg.

Weakness: CWE-79

Which versions are affected by CVE-2017-16798?

It affects 1 product.

Products include Cmsmadesimple Cms Made Simple.

How do I fix CVE-2017-16798?

No fix has been published for CVE-2017-16798 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-16798 being exploited?

There is no known exploitation of CVE-2017-16798 in the wild and no public exploit code.

Other vulnerabilities in Cmsmadesimple Cms Made Simple

• CVE-2010-4663 Other in n/a Critical 10.0
• CVE-2024-1527 Unrestricted Upload of File with Dangerous Type in CMS Made Simple Critical 9.8
• CVE-2018-10081 Auth bypass in n/a Critical 9.8
• CVE-2018-10085 Deserialization in n/a Critical 9.8
• CVE-2017-1000453 Code injection in n/a Critical 9.8

All Cmsmadesimple Cms Made Simple vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-23c3-237c-6x4c.