cmsmadesimple cms made simple 2.2.15 vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv3

File upload vulnerability in CMS Made Simple up to and including 2.2.15 allows remote authenticated malicious users to gain a webshell via a crafted phar file.

Cmsmadesimple Cms Made Simple

8.8

CVSSv3

SQL Injection vulnerability in CMS Made Simple up to and including 2.2.15 allows remote malicious users to execute arbitrary commands via the m1_sortby parameter to modules/News/function.admin_articlestab.php.

Cmsmadesimple Cms Made Simple

8.8

CVSSv3

CMS Made Simple <=2.2.15 is affected by SQL injection in modules/News/function.admin_articlestab.php. The $sortby variable is concatenated with $query1, but it is possible to inject arbitrary SQL language without using the '.

Cmsmadesimple Cms Made Simple

6.1

CVSSv3

Cross Site Scripting (XSS) vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action in moduleinterface.php.

Cmsmadesimple Cms Made Simple 2.2.15

7.2

CVSSv3

CMS Made Simple v2.2.15 exists to contain a Remote Command Execution (RCE) vulnerability via the upload avatar function. This vulnerability is exploited via a crafted image file.

Cmsmadesimple Cms Made Simple 2.2.15

6.1

CVSSv3

CMS Made Simple v2.2.15 exists to contain a reflected cross-site scripting (XSS) vulnerability via the parameter m1_fmmessage.

Cmsmadesimple Cms Made Simple 2.2.15

5.4

CVSSv3

CMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin > My Preferences > Title field.

Cmsmadesimple Cms Made Simple 2.2.15

5.4

CVSSv3

CMS Made Simple prior to 2.2.15 allows XSS via the m1_mod parameter in a ModuleManager local_uninstall action to admin/moduleinterface.php.

Cmsmadesimple Cms Made Simple

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook