CMS Made Simple allows remote authenticated administrators to execute arbitrary PHP code via command injection using the module import feature in admin/moduleinterface.php
CVE Link
Exploit Type - Old
Exploits/Remote File Inclusion/Known Vulnerabilities
Exploit Type
Product Name