Skip to contentCmsmadesimple Cms Made Simple vulnerabilities
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterface.php via the m1_errors parameter.CVE-2018-59654.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterface.php via the m1_messages parameter.CVE-2018-59644.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.5 has XSS in admin/addbookmark.php via the title parameter.CVE-2018-59634.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core...CVE-2017-10004547.8 High
- cmsmadesimple cms made simpleCMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core...CVE-2017-10004539.8 Critical
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies.CVE-2017-177359.8 Critical
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions.CVE-2017-177349.8 Critical
- cmsmadesimple cms made simpleIn CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload...CVE-2017-167985.4 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter.CVE-2017-167846.1 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate...CVE-2017-16783Public exploit9.8 Critical
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via...CVE-2017-114054.9 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via...CVE-2017-114044.9 Medium
- cmsmadesimple cms made simpleIn admin\addgroup.php in CMS Made Simple 2.1.6, when adding a user group, there is no XSS...CVE-2017-96686.1 Medium
- cmsmadesimple cms made simple** DISPUTED ** CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to...CVE-2017-8912Public exploitDisputed7.2 High
- cmsmadesimple cms made simpleXSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the...CVE-2017-72575.4 Medium
- cmsmadesimple cms made simpleXSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the...CVE-2017-72565.4 Medium
- cmsmadesimple cms made simpleXSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the...CVE-2017-72555.4 Medium
- cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote...CVE-2017-65565.4 Medium
- cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6...CVE-2017-65555.4 Medium
- cmsmadesimple cms made simple, form builder +1 moreCMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to...CVE-2017-60725.3 Medium
- cmsmadesimple cms made simple, form builder +1 moreCMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to...CVE-2017-60715.3 Medium
- cmsmadesimple cms made simple, form builder +1 moreCMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to...CVE-2017-60709.8 Critical
- cmsmadesimple cms made simpleCross-site request forgery (CSRF) vulnerability in CMS Made Simple before 2.1.6 allows remote...CVE-2016-79048.0 High
- cmsmadesimple cms made simpleCMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow...CVE-2016-2784Public exploit4.7 Medium
- cmsmadesimple cms made simpleSQL injection vulnerability in the News module in CMS Made Simple (CMSMS) before 1.11.10 allows...CVE-2014-22456.0 Medium
- cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in lib/filemanager/ImageManager/editorFrame.php in CMS...CVE-2014-20924.3 Medium
- cmsmadesimple cms made simpleMultiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple allow remote authenticated...CVE-2014-0334Public exploit3.5 Low
- cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in admin/editevent.php in CMS Made Simple (CMSMS) 1.11.9...CVE-2013-39292.1 Low
- cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) before 1.11.7 allows remote...CVE-2013-41674.3 Medium
- cmsmadesimple cms made simpleDirectory traversal vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple ...CVE-2012-60643.5 Low
- cmsmadesimple cms made simpleCross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS...CVE-2012-54506.8 Medium
- cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in admin/edituser.php in CMS Made Simple 1.10.3 and...CVE-2012-19924.3 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 1.9.2 allows remote attackers to obtain sensitive information via a...CVE-2011-37185.0 Medium
- cmsmadesimple cms made simpleUnspecified vulnerability in the News module in CMS Made Simple (CMSMS) before 1.9.1 has unknown...CVE-2010-466310.0 High
- cmsmadesimple cms made simpleCross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows...CVE-2010-3884Public exploit6.8 Medium
- cmsmadesimple cms made simpleCross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS...CVE-2010-38836.8 Medium
- cmsmadesimple cms made simpleMultiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.7.1 and earlier allow...CVE-2010-38824.3 Medium
- cmsmadesimple cms made simpleDirectory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8...CVE-2010-27977.5 High
- cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in admin/editprefs.php in the backend in CMS Made Simple...CVE-2010-14824.3 Medium
- cmsmadesimple cms made simpleDirectory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote...CVE-2008-5642Public exploit5.0 Medium
- cmsmadesimple cms made simpleSQL injection vulnerability in content_css.php in the TinyMCE module for CMS Made Simple 1.2.2...CVE-2007-6656Public exploit7.5 High
- cmsmadesimple cms made simpleCMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for...CVE-2007-54445.0 Medium
- cmsmadesimple cms made simpleMultiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.1.3.1 allow remote...CVE-2007-54434.3 Medium
- cmsmadesimple cms made simpleCMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads,...CVE-2007-54423.5 Low
- cmsmadesimple cms made simpleCMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations,...CVE-2007-54416.5 Medium
- adodb lite lite, cmsmadesimple cms made simple, journalness +3 more +5 moreEval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used...CVE-2007-5056Public exploitEPSS 27.9%6.8 Medium
- cmsmadesimple cms made simpleSQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote...CVE-2007-2473Public exploit7.5 High
- cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in the mailform feature in CMSimple 2.7 fix1 allows...CVE-2007-06106.8 Medium
- cmsmadesimple cms made simpleMultiple PHP remote file inclusion vulnerabilities in cmsimple/cms.php in CMSimple 2.7 allow...CVE-2007-05517.5 High
- cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote...CVE-2006-6845Public exploit6.8 Medium
- Show moreLoading…