CVE-2018-10081

EUVD-2018-2163 · Published Apr 13, 2018

CMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring.

Technologies

Cmsmadesimple Cms Made Simple

Weaknesses

CWE-640

CVSS scores

v3.09.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
v2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://github.com/itodaro/cve/blob/master/README.md

Potentially impacted assets

See if this affects your attack surface