Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cmsmadesimple cms made simple 1.1.3.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2007-5441
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by (1) adding a user via a direct request to admin/adduser.php and (2) reading the admin lo...
Cmsmadesimple Cms Made Simple 1.1.3.1
NA
CVE-2007-5443
Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.1.3.1 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors related to (1) the anchor tag and (2) listtags.
Cmsmadesimple Cms Made Simple 1.1.3.1
NA
CVE-2007-5444
CMS Made Simple 1.1.3.1 allows remote malicious users to obtain the full path via a direct request for unspecified files.
Cmsmadesimple Cms Made Simple 1.1.3.1
NA
CVE-2007-5442
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors.
Cmsmadesimple Cms Made Simple 1.1.3.1
NA
CVE-2010-2797
Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple prior to 1.8.1 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the default_cms_lang parameter to an admin script, as demonstrated by admin/addboo...
Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 1.6.3Cmsmadesimple Cms Made Simple 1.6.5Cmsmadesimple Cms Made Simple 1.5.1Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.2.1Cmsmadesimple Cms Made Simple 1.1.1Cmsmadesimple Cms Made Simple 1.0.3Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.2.2Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.5.4Cmsmadesimple Cms Made Simple 1.6Cmsmadesimple Cms Made Simple 1.6.1Cmsmadesimple Cms Made Simple 1.6.2Cmsmadesimple Cms Made Simple 1.0.8Cmsmadesimple Cms Made Simple 1.0.7Cmsmadesimple Cms Made Simple 1.0.6Cmsmadesimple Cms Made Simple 1.0.4Cmsmadesimple Cms Made Simple 1.0.5
NA
CVE-2010-1482
Cross-site scripting (XSS) vulnerability in admin/editprefs.php in the backend in CMS Made Simple (CMSMS) prior to 1.7.1 might allow remote malicious users to inject arbitrary web script or HTML via the date_format_string parameter.
Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 0.10Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 1.2.3Cmsmadesimple Cms Made Simple 1.0.7Cmsmadesimple Cms Made Simple 1.0.4Cmsmadesimple Cms Made Simple 0.11.1Cmsmadesimple Cms Made Simple 0.10.4Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 0.11Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.3Cmsmadesimple Cms Made Simple 1.6.5Cmsmadesimple Cms Made Simple 1.6.4Cmsmadesimple Cms Made Simple 1.6.3Cmsmadesimple Cms Made Simple 1.6.2Cmsmadesimple Cms Made Simple 1.6.1
NA
CVE-2010-3882
Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.7.1 and previous versions allow remote malicious users to inject arbitrary web script or HTML via input to the (1) Add Pages, (2) Add Global Content, (3) Edit Global Content, (4) Add Article, (5) Add Categor...
Cmsmadesimple Cms Made Simple 1.6.4Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.2Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 1.1.4.1Cmsmadesimple Cms Made Simple 1.0.8Cmsmadesimple Cms Made Simple 1.0.3Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.0.2Cmsmadesimple Cms Made Simple 1.3Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 0.12.2Cmsmadesimple Cms Made Simple 0.10.4Cmsmadesimple Cms Made Simple 0.10.3Cmsmadesimple Cms Made Simple 0.12Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.7Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6.3Cmsmadesimple Cms Made Simple 1.3.1
NA
CVE-2010-3883
Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and previous versions allows remote malicious users to hijack the authentication of arbitrary users for requests that make permission modifications.
Cmsmadesimple Cms Made Simple 1.6.4Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.6Cmsmadesimple Cms Made Simple 1.5.2Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 1.1.4.1Cmsmadesimple Cms Made Simple 1.0.8Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.6.1Cmsmadesimple Cms Made Simple 1.6.2Cmsmadesimple Cms Made Simple 1.5Cmsmadesimple Cms Made Simple 1.5.1Cmsmadesimple Cms Made Simple 1.0.7Cmsmadesimple Cms Made Simple 1.0.6Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 1.0.4Cmsmadesimple Cms Made Simple 1.0.3Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 0.12.1Cmsmadesimple Cms Made Simple 0.12Cmsmadesimple Cms Made Simple 0.11.2
NA
CVE-2014-2245
SQL injection vulnerability in the News module in CMS Made Simple (CMSMS) prior to 1.11.10 allows remote authenticated users with the "Modify News" permission to execute arbitrary SQL commands via the sortby parameter to admin/moduleinterface.php. NOTE: some of these de...
Cmsmadesimple Cms Made Simple 1.11.7Cmsmadesimple Cms Made Simple 1.11.5Cmsmadesimple Cms Made Simple 1.10.3Cmsmadesimple Cms Made Simple 1.10.1Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 0.9.1Cmsmadesimple Cms Made Simple 0.7.1Cmsmadesimple Cms Made Simple 0.6.3Cmsmadesimple Cms Made Simple 0.5Cmsmadesimple Cms Made Simple 0.4Cmsmadesimple Cms Made Simple 0.12.2Cmsmadesimple Cms Made Simple 0.12Cmsmadesimple Cms Made Simple 0.10.1Cmsmadesimple Cms Made Simple 0.1Cmsmadesimple Cms Made Simple 1.11.3Cmsmadesimple Cms Made Simple 1.11.2.1Cmsmadesimple Cms Made Simple 1.11.2Cmsmadesimple Cms Made Simple 1.11.1Cmsmadesimple Cms Made Simple 1.0.5Cmsmadesimple Cms Made Simple 1.0.4
4.7
CVSSv3
CVE-2016-2784
CMS Made Simple 2.x prior to 2.1.3 and 1.x prior to 1.12.2, when Smarty Cache is activated, allow remote malicious users to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS) attacks via a crafted HTTP Host header in a request.
Cmsmadesimple Cms Made Simple 2.1.1Cmsmadesimple Cms Made Simple 2.1Cmsmadesimple Cms Made Simple 1.11.11Cmsmadesimple Cms Made Simple 1.11.10Cmsmadesimple Cms Made Simple 1.11.3Cmsmadesimple Cms Made Simple 1.11.2.1Cmsmadesimple Cms Made Simple 1.10Cmsmadesimple Cms Made Simple 1.9.4.3Cmsmadesimple Cms Made Simple 1.9.4.2Cmsmadesimple Cms Made Simple 1.6.10Cmsmadesimple Cms Made Simple 1.6.9Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.5.2Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 1.2.4Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 1.1.1Cmsmadesimple Cms Made Simple 1.0.2Cmsmadesimple Cms Made Simple 1.0.1Cmsmadesimple Cms Made Simple 1.12.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook