Cmsmadesimple

Cms Made Simple

155 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.5

CVE-2012-6064

  • EPSS 0.9%
  • Veröffentlicht 03.12.2012 21:55:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) before 1.11.2.1 allows remote authenticated administrators to delete arbitrary files via a .. (dot dot) in the deld parameter. NOTE: this can be ...

6.8

CVE-2012-5450

Exploit
  • EPSS 0.28%
  • Veröffentlicht 03.12.2012 21:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) 1.11.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files v...

4.3

CVE-2012-1992

  • EPSS 0.32%
  • Veröffentlicht 11.04.2012 10:39:27
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in admin/edituser.php in CMS Made Simple 1.10.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the email parameter (aka the Email Address field in the Edit User template).

5

CVE-2011-3718

Exploit
  • EPSS 0.46%
  • Veröffentlicht 23.09.2011 23:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

CMS Made Simple (CMSMS) 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/TinyMCE/TinyMCE.module.php and certain othe...

10

CVE-2010-4663

  • EPSS 0.41%
  • Veröffentlicht 08.06.2011 10:36:13
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unspecified vulnerability in the News module in CMS Made Simple (CMSMS) before 1.9.1 has unknown impact and attack vectors.

4.3

CVE-2010-3882

  • EPSS 0.26%
  • Veröffentlicht 08.10.2010 21:00:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.7.1 and earlier allow remote attackers to inject arbitrary web script or HTML via input to the (1) Add Pages, (2) Add Global Content, (3) Edit Global Content, (4) Add Article, (...

6.8

CVE-2010-3883

  • EPSS 0.09%
  • Veröffentlicht 08.10.2010 21:00:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make permission modifications.

6.8

CVE-2010-3884

  • EPSS 0.08%
  • Veröffentlicht 08.10.2010 21:00:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that reset the administrative password. NOTE: the provenance of this information ...

7.5

CVE-2010-2797

  • EPSS 0.38%
  • Veröffentlicht 08.10.2010 21:00:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the default_cms_lang parameter to an admin script, as demons...

4.3

CVE-2010-1482

Exploit
  • EPSS 0.29%
  • Veröffentlicht 12.05.2010 16:05:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in admin/editprefs.php in the backend in CMS Made Simple (CMSMS) before 1.7.1 might allow remote attackers to inject arbitrary web script or HTML via the date_format_string parameter.