CVE-2017-8912

Published: 2017-05-12T07:29Z

Last Modified: 2024-11-21T03:34Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code parameter to admin/editusertag.php, related to the CreateTagFunction and CallUserTag functions. NOTE: the vendor reportedly has stated this is "a feature, not a bug. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt