Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cmsmadesimple cms made simple 1.1.2 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-2797
Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple prior to 1.8.1 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the default_cms_lang parameter to an admin script, as demonstrated by admin/addboo...
Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 1.6.3Cmsmadesimple Cms Made Simple 1.6.5Cmsmadesimple Cms Made Simple 1.5.1Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.2.1Cmsmadesimple Cms Made Simple 1.1.1Cmsmadesimple Cms Made Simple 1.0.3Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.2.2Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.5.4Cmsmadesimple Cms Made Simple 1.6Cmsmadesimple Cms Made Simple 1.6.1Cmsmadesimple Cms Made Simple 1.6.2Cmsmadesimple Cms Made Simple 1.0.8Cmsmadesimple Cms Made Simple 1.0.7Cmsmadesimple Cms Made Simple 1.0.6Cmsmadesimple Cms Made Simple 1.0.4Cmsmadesimple Cms Made Simple 1.0.5
NA
CVE-2010-1482
Cross-site scripting (XSS) vulnerability in admin/editprefs.php in the backend in CMS Made Simple (CMSMS) prior to 1.7.1 might allow remote malicious users to inject arbitrary web script or HTML via the date_format_string parameter.
Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 0.10Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 1.2.3Cmsmadesimple Cms Made Simple 1.0.7Cmsmadesimple Cms Made Simple 1.0.4Cmsmadesimple Cms Made Simple 0.11.1Cmsmadesimple Cms Made Simple 0.10.4Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 0.11Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.3Cmsmadesimple Cms Made Simple 1.6.5Cmsmadesimple Cms Made Simple 1.6.4Cmsmadesimple Cms Made Simple 1.6.3Cmsmadesimple Cms Made Simple 1.6.2Cmsmadesimple Cms Made Simple 1.6.1
4.7
CVSSv3
CVE-2016-2784
CMS Made Simple 2.x prior to 2.1.3 and 1.x prior to 1.12.2, when Smarty Cache is activated, allow remote malicious users to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS) attacks via a crafted HTTP Host header in a request.
Cmsmadesimple Cms Made Simple 2.1.1Cmsmadesimple Cms Made Simple 2.1Cmsmadesimple Cms Made Simple 1.11.11Cmsmadesimple Cms Made Simple 1.11.10Cmsmadesimple Cms Made Simple 1.11.3Cmsmadesimple Cms Made Simple 1.11.2.1Cmsmadesimple Cms Made Simple 1.10Cmsmadesimple Cms Made Simple 1.9.4.3Cmsmadesimple Cms Made Simple 1.9.4.2Cmsmadesimple Cms Made Simple 1.6.10Cmsmadesimple Cms Made Simple 1.6.9Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.5.2Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 1.2.4Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 1.1.1Cmsmadesimple Cms Made Simple 1.0.2Cmsmadesimple Cms Made Simple 1.0.1Cmsmadesimple Cms Made Simple 1.12.1
NA
CVE-2010-3882
Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.7.1 and previous versions allow remote malicious users to inject arbitrary web script or HTML via input to the (1) Add Pages, (2) Add Global Content, (3) Edit Global Content, (4) Add Article, (5) Add Categor...
Cmsmadesimple Cms Made Simple 1.6.4Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.2Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 1.1.4.1Cmsmadesimple Cms Made Simple 1.0.8Cmsmadesimple Cms Made Simple 1.0.3Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.0.2Cmsmadesimple Cms Made Simple 1.3Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 0.12.2Cmsmadesimple Cms Made Simple 0.10.4Cmsmadesimple Cms Made Simple 0.10.3Cmsmadesimple Cms Made Simple 0.12Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.7Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6.3Cmsmadesimple Cms Made Simple 1.3.1
NA
CVE-2010-3883
Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and previous versions allows remote malicious users to hijack the authentication of arbitrary users for requests that make permission modifications.
Cmsmadesimple Cms Made Simple 1.6.4Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.6Cmsmadesimple Cms Made Simple 1.5.2Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 1.1.4.1Cmsmadesimple Cms Made Simple 1.0.8Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.6.1Cmsmadesimple Cms Made Simple 1.6.2Cmsmadesimple Cms Made Simple 1.5Cmsmadesimple Cms Made Simple 1.5.1Cmsmadesimple Cms Made Simple 1.0.7Cmsmadesimple Cms Made Simple 1.0.6Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 1.0.4Cmsmadesimple Cms Made Simple 1.0.3Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 0.12.1Cmsmadesimple Cms Made Simple 0.12Cmsmadesimple Cms Made Simple 0.11.2
NA
CVE-2014-2245
SQL injection vulnerability in the News module in CMS Made Simple (CMSMS) prior to 1.11.10 allows remote authenticated users with the "Modify News" permission to execute arbitrary SQL commands via the sortby parameter to admin/moduleinterface.php. NOTE: some of these de...
Cmsmadesimple Cms Made Simple 1.11.7Cmsmadesimple Cms Made Simple 1.11.5Cmsmadesimple Cms Made Simple 1.10.3Cmsmadesimple Cms Made Simple 1.10.1Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 0.9.1Cmsmadesimple Cms Made Simple 0.7.1Cmsmadesimple Cms Made Simple 0.6.3Cmsmadesimple Cms Made Simple 0.5Cmsmadesimple Cms Made Simple 0.4Cmsmadesimple Cms Made Simple 0.12.2Cmsmadesimple Cms Made Simple 0.12Cmsmadesimple Cms Made Simple 0.10.1Cmsmadesimple Cms Made Simple 0.1Cmsmadesimple Cms Made Simple 1.11.3Cmsmadesimple Cms Made Simple 1.11.2.1Cmsmadesimple Cms Made Simple 1.11.2Cmsmadesimple Cms Made Simple 1.11.1Cmsmadesimple Cms Made Simple 1.0.5Cmsmadesimple Cms Made Simple 1.0.4
NA
CVE-2012-1992
Cross-site scripting (XSS) vulnerability in admin/edituser.php in CMS Made Simple 1.10.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the email parameter (aka the Email Address field in the Edit User template).
Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.10.2Cmsmadesimple Cms Made Simple 1.9.2Cmsmadesimple Cms Made Simple 1.9Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 1.6.5Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.2Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.1.4.1Cmsmadesimple Cms Made Simple 1.1.1Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.6.8Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.0.5Cmsmadesimple Cms Made Simple 1.2.2Cmsmadesimple Cms Made Simple 0.1Cmsmadesimple Cms Made Simple 0.6Cmsmadesimple Cms Made Simple 0.7.1Cmsmadesimple Cms Made Simple 0.2.1Cmsmadesimple Cms Made Simple 0.10.2
NA
CVE-2010-4663
Unspecified vulnerability in the News module in CMS Made Simple (CMSMS) prior to 1.9.1 has unknown impact and attack vectors.
Cmsmadesimple Cms Made Simple 1.8.2Cmsmadesimple Cms Made Simple 1.8.1Cmsmadesimple Cms Made Simple 1.8Cmsmadesimple Cms Made Simple 1.7.1Cmsmadesimple Cms Made Simple 1.5Cmsmadesimple Cms Made Simple 1.4Cmsmadesimple Cms Made Simple 1.3Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 0.12Cmsmadesimple Cms Made Simple 0.11.2Cmsmadesimple Cms Made Simple 0.11.1Cmsmadesimple Cms Made Simple 0.11Cmsmadesimple Cms Made Simple 1.0.5Cmsmadesimple Cms Made Simple 1.0.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6.5Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.5.1Cmsmadesimple Cms Made Simple 1.2.4Cmsmadesimple Cms Made Simple 1.2.1
NA
CVE-2012-6064
Directory traversal vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) prior to 1.11.2.1 allows remote authenticated administrators to delete arbitrary files via a .. (dot dot) in the deld parameter. NOTE: this can be leveraged using CSRF (CVE-201...
Cmsmadesimple Cms Made Simple 1.9.4Cmsmadesimple Cms Made Simple 1.9.4.1Cmsmadesimple Cms Made Simple 1.9Cmsmadesimple Cms Made Simple 1.1.3.1Cmsmadesimple Cms Made Simple 1.7Cmsmadesimple Cms Made Simple 1.6Cmsmadesimple Cms Made Simple 1.6.1Cmsmadesimple Cms Made Simple 1.3Cmsmadesimple Cms Made Simple 1.4Cmsmadesimple Cms Made Simple 1.0.1Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 0.6.1Cmsmadesimple Cms Made Simple 0.7Cmsmadesimple Cms Made Simple 0.4Cmsmadesimple Cms Made Simple 0.3.2Cmsmadesimple Cms Made Simple 0.8.1Cmsmadesimple Cms Made Simple 0.8.2Cmsmadesimple Cms Made Simple 0.12Cmsmadesimple Cms Made Simple 0.11.2Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.9.2
NA
CVE-2012-5450
Cross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) 1.11.2 and previous versions allows remote malicious users to hijack the authentication of administrators for requests that delete arbitrary files via the deld pa...
Cmsmadesimple Cms Made Simple 1.9.3Cmsmadesimple Cms Made Simple 1.9.4Cmsmadesimple Cms Made Simple 1.8.2Cmsmadesimple Cms Made Simple 1.9Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.4Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.9.1Cmsmadesimple Cms Made Simple 1.1.3Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6.3Cmsmadesimple Cms Made Simple 1.5Cmsmadesimple Cms Made Simple 1.5.1Cmsmadesimple Cms Made Simple 1.2.3Cmsmadesimple Cms Made Simple 1.2.1Cmsmadesimple Cms Made Simple 1.7.1Cmsmadesimple Cms Made Simple 1.8.1Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 0.1Cmsmadesimple Cms Made Simple 0.7.2Cmsmadesimple Cms Made Simple 0.7.1Cmsmadesimple Cms Made Simple 0.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook