Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cmsmadesimple cms made simple 0.3.2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2014-2245
SQL injection vulnerability in the News module in CMS Made Simple (CMSMS) prior to 1.11.10 allows remote authenticated users with the "Modify News" permission to execute arbitrary SQL commands via the sortby parameter to admin/moduleinterface.php. NOTE: some of these de...
Cmsmadesimple Cms Made Simple 1.11.7Cmsmadesimple Cms Made Simple 1.11.5Cmsmadesimple Cms Made Simple 1.10.3Cmsmadesimple Cms Made Simple 1.10.1Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 0.9.1Cmsmadesimple Cms Made Simple 0.7.1Cmsmadesimple Cms Made Simple 0.6.3Cmsmadesimple Cms Made Simple 0.5Cmsmadesimple Cms Made Simple 0.4Cmsmadesimple Cms Made Simple 0.12.2Cmsmadesimple Cms Made Simple 0.12Cmsmadesimple Cms Made Simple 0.10.1Cmsmadesimple Cms Made Simple 0.1Cmsmadesimple Cms Made Simple 1.11.3Cmsmadesimple Cms Made Simple 1.11.2.1Cmsmadesimple Cms Made Simple 1.11.2Cmsmadesimple Cms Made Simple 1.11.1Cmsmadesimple Cms Made Simple 1.0.5Cmsmadesimple Cms Made Simple 1.0.4
NA
CVE-2012-1992
Cross-site scripting (XSS) vulnerability in admin/edituser.php in CMS Made Simple 1.10.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the email parameter (aka the Email Address field in the Edit User template).
Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.10.2Cmsmadesimple Cms Made Simple 1.9.2Cmsmadesimple Cms Made Simple 1.9Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 1.6.5Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.2Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.1.4.1Cmsmadesimple Cms Made Simple 1.1.1Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.6.8Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.0.5Cmsmadesimple Cms Made Simple 1.2.2Cmsmadesimple Cms Made Simple 0.1Cmsmadesimple Cms Made Simple 0.6Cmsmadesimple Cms Made Simple 0.7.1Cmsmadesimple Cms Made Simple 0.2.1Cmsmadesimple Cms Made Simple 0.10.2
NA
CVE-2010-4663
Unspecified vulnerability in the News module in CMS Made Simple (CMSMS) prior to 1.9.1 has unknown impact and attack vectors.
Cmsmadesimple Cms Made Simple 1.8.2Cmsmadesimple Cms Made Simple 1.8.1Cmsmadesimple Cms Made Simple 1.8Cmsmadesimple Cms Made Simple 1.7.1Cmsmadesimple Cms Made Simple 1.5Cmsmadesimple Cms Made Simple 1.4Cmsmadesimple Cms Made Simple 1.3Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 0.12Cmsmadesimple Cms Made Simple 0.11.2Cmsmadesimple Cms Made Simple 0.11.1Cmsmadesimple Cms Made Simple 0.11Cmsmadesimple Cms Made Simple 1.0.5Cmsmadesimple Cms Made Simple 1.0.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6.5Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.5.1Cmsmadesimple Cms Made Simple 1.2.4Cmsmadesimple Cms Made Simple 1.2.1
NA
CVE-2012-5450
Cross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) 1.11.2 and previous versions allows remote malicious users to hijack the authentication of administrators for requests that delete arbitrary files via the deld pa...
Cmsmadesimple Cms Made Simple 1.9.3Cmsmadesimple Cms Made Simple 1.9.4Cmsmadesimple Cms Made Simple 1.8.2Cmsmadesimple Cms Made Simple 1.9Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.4Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.9.1Cmsmadesimple Cms Made Simple 1.1.3Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6.3Cmsmadesimple Cms Made Simple 1.5Cmsmadesimple Cms Made Simple 1.5.1Cmsmadesimple Cms Made Simple 1.2.3Cmsmadesimple Cms Made Simple 1.2.1Cmsmadesimple Cms Made Simple 1.7.1Cmsmadesimple Cms Made Simple 1.8.1Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 0.1Cmsmadesimple Cms Made Simple 0.7.2Cmsmadesimple Cms Made Simple 0.7.1Cmsmadesimple Cms Made Simple 0.5
NA
CVE-2012-6064
Directory traversal vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) prior to 1.11.2.1 allows remote authenticated administrators to delete arbitrary files via a .. (dot dot) in the deld parameter. NOTE: this can be leveraged using CSRF (CVE-201...
Cmsmadesimple Cms Made Simple 1.9.4Cmsmadesimple Cms Made Simple 1.9.4.1Cmsmadesimple Cms Made Simple 1.9Cmsmadesimple Cms Made Simple 1.1.3.1Cmsmadesimple Cms Made Simple 1.7Cmsmadesimple Cms Made Simple 1.6Cmsmadesimple Cms Made Simple 1.6.1Cmsmadesimple Cms Made Simple 1.3Cmsmadesimple Cms Made Simple 1.4Cmsmadesimple Cms Made Simple 1.0.1Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 0.6.1Cmsmadesimple Cms Made Simple 0.7Cmsmadesimple Cms Made Simple 0.4Cmsmadesimple Cms Made Simple 0.3.2Cmsmadesimple Cms Made Simple 0.8.1Cmsmadesimple Cms Made Simple 0.8.2Cmsmadesimple Cms Made Simple 0.12Cmsmadesimple Cms Made Simple 0.11.2Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.9.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook