CMS Made Simple editusertag.php Remote OS Command Injection Exploit

CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code parameter to admin/editusertag.php, related to the CreateTagFunction and CallUserTag functions.
CVE Link
CVE-2017-8912
Exploit Type - Old
Exploits/Remote
Exploit Platform
Windows
Linux
Exploit Type
Exploits
Remote
Product Name
Impact