Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cmsmadesimple cms made simple 1.10 vulnerabilities and exploits

(subscribe to this query)
4.7
CVSSv3
CVE-2016-2784
CMS Made Simple 2.x prior to 2.1.3 and 1.x prior to 1.12.2, when Smarty Cache is activated, allow remote malicious users to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS) attacks via a crafted HTTP Host header in a request.
Cmsmadesimple Cms Made Simple 2.1.1Cmsmadesimple Cms Made Simple 2.1Cmsmadesimple Cms Made Simple 1.11.11Cmsmadesimple Cms Made Simple 1.11.10Cmsmadesimple Cms Made Simple 1.11.3Cmsmadesimple Cms Made Simple 1.11.2.1Cmsmadesimple Cms Made Simple 1.10Cmsmadesimple Cms Made Simple 1.9.4.3Cmsmadesimple Cms Made Simple 1.9.4.2Cmsmadesimple Cms Made Simple 1.6.10Cmsmadesimple Cms Made Simple 1.6.9Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.5.2Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 1.2.4Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 1.1.1Cmsmadesimple Cms Made Simple 1.0.2Cmsmadesimple Cms Made Simple 1.0.1Cmsmadesimple Cms Made Simple 1.12.1
NA
CVE-2014-2245
SQL injection vulnerability in the News module in CMS Made Simple (CMSMS) prior to 1.11.10 allows remote authenticated users with the "Modify News" permission to execute arbitrary SQL commands via the sortby parameter to admin/moduleinterface.php. NOTE: some of these de...
Cmsmadesimple Cms Made Simple 1.11.7Cmsmadesimple Cms Made Simple 1.11.5Cmsmadesimple Cms Made Simple 1.10.3Cmsmadesimple Cms Made Simple 1.10.1Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 0.9.1Cmsmadesimple Cms Made Simple 0.7.1Cmsmadesimple Cms Made Simple 0.6.3Cmsmadesimple Cms Made Simple 0.5Cmsmadesimple Cms Made Simple 0.4Cmsmadesimple Cms Made Simple 0.12.2Cmsmadesimple Cms Made Simple 0.12Cmsmadesimple Cms Made Simple 0.10.1Cmsmadesimple Cms Made Simple 0.1Cmsmadesimple Cms Made Simple 1.11.3Cmsmadesimple Cms Made Simple 1.11.2.1Cmsmadesimple Cms Made Simple 1.11.2Cmsmadesimple Cms Made Simple 1.11.1Cmsmadesimple Cms Made Simple 1.0.5Cmsmadesimple Cms Made Simple 1.0.4
NA
CVE-2012-1992
Cross-site scripting (XSS) vulnerability in admin/edituser.php in CMS Made Simple 1.10.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the email parameter (aka the Email Address field in the Edit User template).
Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.10.2Cmsmadesimple Cms Made Simple 1.9.2Cmsmadesimple Cms Made Simple 1.9Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 1.6.5Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.2Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.1.4.1Cmsmadesimple Cms Made Simple 1.1.1Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.6.8Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.0.5Cmsmadesimple Cms Made Simple 1.2.2Cmsmadesimple Cms Made Simple 0.1Cmsmadesimple Cms Made Simple 0.6Cmsmadesimple Cms Made Simple 0.7.1Cmsmadesimple Cms Made Simple 0.2.1Cmsmadesimple Cms Made Simple 0.10.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook