Lucene search
HistoryOct 14, 2007 - 6:17 p.m.
CVE-2007-5442
cms made simple
permission bypass
vulnerability
nvd
cve-2007-5442
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
6.3 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
41.3%
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors.
Affected configurations
Node
cmsmadesimplecms_made_simpleMatch1.1.3.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| cmsmadesimple:cms_made_simple | cmsmadesimple cms made simple | eq | 1.1.3.1 |
Related
nvd
nvd
CVE-2007-5442
2007-10-14 18:17:00
prion
prion
Design/Logic Flaw
2007-10-14 18:17:00
cvelist
cvelist
CVE-2007-5442
2007-10-14 18:00:00
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
6.3 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
41.3%
Related for CVE-2007-5442