Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cmsmadesimple cms made simple vulnerabilities and exploits
(subscribe to this query)
8
CVSSv3
CVE-2016-7904
Cross-site request forgery (CSRF) vulnerability in CMS Made Simple prior to 2.1.6 allows remote malicious users to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request.
Cmsmadesimple Cms Made Simple
NA
CVE-2007-6656
SQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2 and previous versions allows remote malicious users to execute arbitrary SQL commands via the templateid parameter.
Cmsmadesimple Cms Made Simple
1 EDB exploit
7.2
CVSSv3
CVE-2019-9058
An issue exists in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted value in the sel_groups parameter that leads to authenticated object injection.
Cmsmadesimple Cms Made Simple
8.8
CVSSv3
CVE-2019-9061
An issue exists in CMS Made Simple 2.2.8. In the module ModuleManager (in the file action.installmodule.php), it is possible to reach an unserialize call with untrusted input and achieve authenticated object injection by using the "install module" feature.
Cmsmadesimple Cms Made Simple
9.8
CVSSv3
CVE-2017-6070
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote malicious users to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.
Cmsmadesimple Form Builder
Cmsmadesimple Cms Made Simple
5.3
CVSSv3
CVE-2017-6071
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote malicious users to conduct information-disclosure attacks via exportxml.
Cmsmadesimple Form Builder
Cmsmadesimple Cms Made Simple
5.3
CVSSv3
CVE-2017-6072
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote malicious users to conduct information-disclosure attacks via defaultadmin.
Cmsmadesimple Form Builder
Cmsmadesimple Cms Made Simple
5.4
CVSSv3
CVE-2017-7257
XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_content parameter. Someone must login to conduct the attack.
Cmsmadesimple Cms Made Simple 2.1.6
4.8
CVSSv3
CVE-2018-8058
CMS Made Simple (CMSMS) 2.2.6 has XSS in admin/moduleinterface.php via the pagedata parameter.
Cmsmadesimple Cms Made Simple 2.2.6
5.3
CVSSv3
CVE-2018-9921
In CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible to determine the existence of files and directories outside the web-site installation directory, and determine whether a file has contents matching a specified checksum. The attack uses an admin/checksum.php?...
Cmsmadesimple Cms Made Simple 2.2.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
cross-site scripting
CVE-2024-5158
XML external entity
CVE-2024-4262
CVE-2024-2036
CVE-2024-4985
CVE-2024-21791
remote attackers
CVE-2023-43208
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »