Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cmsmadesimple vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2007-5444
CMS Made Simple 1.1.3.1 allows remote malicious users to obtain the full path via a direct request for unspecified files.
Cmsmadesimple Cms Made Simple 1.1.3.1
3.5
CVSSv2
CVE-2020-23481
CMS Made Simple 2.2.14 exists to contain a cross-site scripting (XSS) vulnerability which allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the Field Definition text field.
Cmsmadesimple Cms Made Simple 2.2.14
7.5
CVSSv2
CVE-2007-0551
Multiple PHP remote file inclusion vulnerabilities in cmsimple/cms.php in CMSimple 2.7 allow remote malicious users to execute arbitrary PHP code via a URL in the (1) pth[file][config] and (2) pth[file][image] parameters.
Cmsmadesimple Cms Made Simple 2.7
3.5
CVSSv2
CVE-2017-6555
Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the m1_description parameter (aka "Design Manager > Categories > Category Description").
Cmsmadesimple Cms Made Simple 2.1.6
3.5
CVSSv2
CVE-2017-6556
Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage > sitesetting > General Settings > globalmetadata" field.
Cmsmadesimple Cms Made Simple 2.1.6
6.8
CVSSv2
CVE-2006-6844
Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote malicious users to inject arbitrary web script or HTML via the user comment form.
Cmsmadesimple Cms Made Simple 1.0.2
6.8
CVSSv2
CVE-2006-6845
Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote malicious users to inject arbitrary web script or HTML via the cntnt01searchinput parameter in a Search action.
Cmsmadesimple Cms Made Simple 1.0.2
1 EDB exploit
7.5
CVSSv2
CVE-2017-16783
In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter.
Cmsmadesimple Cms Made Simple 2.1.6
4.3
CVSSv2
CVE-2017-16784
In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter.
Cmsmadesimple Cms Made Simple 2.2.2
3.5
CVSSv2
CVE-2017-16798
In CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin or end with a "php" substring, which allows remote malicious users to bypass intended access restrictions or trigger XSS via other...
Cmsmadesimple Cms Made Simple 2.2.3.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race condition
CVE-2024-4249
CVE-2024-4244
CVE-2023-20198
TCP
CVE-2022-48648
CVE-2022-48636
CVE-2024-21345
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
5
6
7
8
9
10
NEXT »