Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cmsmadesimple cms made simple 1.9.4 vulnerabilities and exploits

(subscribe to this query)
2.6
CVSSv2
CVE-2016-2784
CMS Made Simple 2.x prior to 2.1.3 and 1.x prior to 1.12.2, when Smarty Cache is activated, allow remote malicious users to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS) attacks via a crafted HTTP Host header in a request.
Cmsmadesimple Cms Made Simple 2.1.1Cmsmadesimple Cms Made Simple 2.1Cmsmadesimple Cms Made Simple 1.11.11Cmsmadesimple Cms Made Simple 1.11.10Cmsmadesimple Cms Made Simple 1.11.3Cmsmadesimple Cms Made Simple 1.11.2.1Cmsmadesimple Cms Made Simple 1.10Cmsmadesimple Cms Made Simple 1.9.4.3Cmsmadesimple Cms Made Simple 1.9.4.2Cmsmadesimple Cms Made Simple 1.6.10Cmsmadesimple Cms Made Simple 1.6.9Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.5.2Cmsmadesimple Cms Made Simple 1.2.5Cmsmadesimple Cms Made Simple 1.2.4Cmsmadesimple Cms Made Simple 1.1.2Cmsmadesimple Cms Made Simple 1.1.1Cmsmadesimple Cms Made Simple 1.0.2Cmsmadesimple Cms Made Simple 1.0.1Cmsmadesimple Cms Made Simple 1.12.1
4.3
CVSSv2
CVE-2012-1992
Cross-site scripting (XSS) vulnerability in admin/edituser.php in CMS Made Simple 1.10.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the email parameter (aka the Email Address field in the Edit User template).
Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.10.2Cmsmadesimple Cms Made Simple 1.9.2Cmsmadesimple Cms Made Simple 1.9Cmsmadesimple Cms Made Simple 1.0Cmsmadesimple Cms Made Simple 1.6.5Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.2Cmsmadesimple Cms Made Simple 1.5.3Cmsmadesimple Cms Made Simple 1.1.4.1Cmsmadesimple Cms Made Simple 1.1.1Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.6.8Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 1.0.5Cmsmadesimple Cms Made Simple 1.2.2Cmsmadesimple Cms Made Simple 0.1Cmsmadesimple Cms Made Simple 0.6Cmsmadesimple Cms Made Simple 0.7.1Cmsmadesimple Cms Made Simple 0.2.1Cmsmadesimple Cms Made Simple 0.10.2
6.8
CVSSv2
CVE-2012-5450
Cross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) 1.11.2 and previous versions allows remote malicious users to hijack the authentication of administrators for requests that delete arbitrary files via the deld pa...
Cmsmadesimple Cms Made Simple 1.9.3Cmsmadesimple Cms Made Simple 1.9.4Cmsmadesimple Cms Made Simple 1.8.2Cmsmadesimple Cms Made Simple 1.9Cmsmadesimple Cms Made Simple 1.6.6Cmsmadesimple Cms Made Simple 1.5.4Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.9.1Cmsmadesimple Cms Made Simple 1.1.3Cmsmadesimple Cms Made Simple 1.6.7Cmsmadesimple Cms Made Simple 1.6.3Cmsmadesimple Cms Made Simple 1.5Cmsmadesimple Cms Made Simple 1.5.1Cmsmadesimple Cms Made Simple 1.2.3Cmsmadesimple Cms Made Simple 1.2.1Cmsmadesimple Cms Made Simple 1.7.1Cmsmadesimple Cms Made Simple 1.8.1Cmsmadesimple Cms Made Simple 1.1Cmsmadesimple Cms Made Simple 0.1Cmsmadesimple Cms Made Simple 0.7.2Cmsmadesimple Cms Made Simple 0.7.1Cmsmadesimple Cms Made Simple 0.5
3.5
CVSSv2
CVE-2012-6064
Directory traversal vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) prior to 1.11.2.1 allows remote authenticated administrators to delete arbitrary files via a .. (dot dot) in the deld parameter. NOTE: this can be leveraged using CSRF (CVE-201...
Cmsmadesimple Cms Made Simple 1.9.4Cmsmadesimple Cms Made Simple 1.9.4.1Cmsmadesimple Cms Made Simple 1.9Cmsmadesimple Cms Made Simple 1.1.3.1Cmsmadesimple Cms Made Simple 1.7Cmsmadesimple Cms Made Simple 1.6Cmsmadesimple Cms Made Simple 1.6.1Cmsmadesimple Cms Made Simple 1.3Cmsmadesimple Cms Made Simple 1.4Cmsmadesimple Cms Made Simple 1.0.1Cmsmadesimple Cms Made Simple 1.4.1Cmsmadesimple Cms Made Simple 1.2Cmsmadesimple Cms Made Simple 0.6.1Cmsmadesimple Cms Made Simple 0.7Cmsmadesimple Cms Made Simple 0.4Cmsmadesimple Cms Made Simple 0.3.2Cmsmadesimple Cms Made Simple 0.8.1Cmsmadesimple Cms Made Simple 0.8.2Cmsmadesimple Cms Made Simple 0.12Cmsmadesimple Cms Made Simple 0.11.2Cmsmadesimple Cms Made SimpleCmsmadesimple Cms Made Simple 1.9.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook