Lucene search

[email protected]CVE-2010-3883

HistoryOct 03, 2022 - 4:20 p.m.

CVE-2010-3883

2022-10-0316:20:56

CWE-352

[email protected]

web.nvd.nist.gov

cve-2010-3883

cross-site request forgery

csrf

cms made simple

security vulnerability

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.5%

JSON

Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make permission modifications.

Affected configurations

NVD

Node

cmsmadesimplecms_made_simpleRange≤1.7.1

cmsmadesimplecms_made_simpleMatch0.10

cmsmadesimplecms_made_simpleMatch0.10.3

cmsmadesimplecms_made_simpleMatch0.10.4

cmsmadesimplecms_made_simpleMatch0.11

cmsmadesimplecms_made_simpleMatch0.11beta5

cmsmadesimplecms_made_simpleMatch0.11beta6

cmsmadesimplecms_made_simpleMatch0.11.1

cmsmadesimplecms_made_simpleMatch0.11.2

cmsmadesimplecms_made_simpleMatch0.12

cmsmadesimplecms_made_simpleMatch0.12beta1

cmsmadesimplecms_made_simpleMatch0.12beta2

cmsmadesimplecms_made_simpleMatch0.12.1

cmsmadesimplecms_made_simpleMatch0.12.2

cmsmadesimplecms_made_simpleMatch0.13beta1

cmsmadesimplecms_made_simpleMatch0.13beta2

cmsmadesimplecms_made_simpleMatch0.13beta3

cmsmadesimplecms_made_simpleMatch1.0

cmsmadesimplecms_made_simpleMatch1.0beta1

cmsmadesimplecms_made_simpleMatch1.0beta2

cmsmadesimplecms_made_simpleMatch1.0beta3

cmsmadesimplecms_made_simpleMatch1.0beta4

cmsmadesimplecms_made_simpleMatch1.0beta5

cmsmadesimplecms_made_simpleMatch1.0beta6

cmsmadesimplecms_made_simpleMatch1.0.1

cmsmadesimplecms_made_simpleMatch1.0.2

cmsmadesimplecms_made_simpleMatch1.0.3

cmsmadesimplecms_made_simpleMatch1.0.4

cmsmadesimplecms_made_simpleMatch1.0.5

cmsmadesimplecms_made_simpleMatch1.0.6

cmsmadesimplecms_made_simpleMatch1.0.7

cmsmadesimplecms_made_simpleMatch1.0.8

cmsmadesimplecms_made_simpleMatch1.1

cmsmadesimplecms_made_simpleMatch1.1rc1

cmsmadesimplecms_made_simpleMatch1.1rc2

cmsmadesimplecms_made_simpleMatch1.1rc3

cmsmadesimplecms_made_simpleMatch1.1.1

cmsmadesimplecms_made_simpleMatch1.1.2

cmsmadesimplecms_made_simpleMatch1.1.3.1

cmsmadesimplecms_made_simpleMatch1.1.4.1

cmsmadesimplecms_made_simpleMatch1.2

cmsmadesimplecms_made_simpleMatch1.2beta1

cmsmadesimplecms_made_simpleMatch1.2beta2

cmsmadesimplecms_made_simpleMatch1.2beta3

cmsmadesimplecms_made_simpleMatch1.2rc1

cmsmadesimplecms_made_simpleMatch1.2.1

cmsmadesimplecms_made_simpleMatch1.2.2

cmsmadesimplecms_made_simpleMatch1.2.3

cmsmadesimplecms_made_simpleMatch1.2.4

cmsmadesimplecms_made_simpleMatch1.2.5

cmsmadesimplecms_made_simpleMatch1.3

cmsmadesimplecms_made_simpleMatch1.3beta1

cmsmadesimplecms_made_simpleMatch1.3beta2

cmsmadesimplecms_made_simpleMatch1.3.1

cmsmadesimplecms_made_simpleMatch1.4

cmsmadesimplecms_made_simpleMatch1.4beta1

cmsmadesimplecms_made_simpleMatch1.4beta2

cmsmadesimplecms_made_simpleMatch1.4.1

cmsmadesimplecms_made_simpleMatch1.5

cmsmadesimplecms_made_simpleMatch1.5beta1

cmsmadesimplecms_made_simpleMatch1.5.1

cmsmadesimplecms_made_simpleMatch1.5.2

cmsmadesimplecms_made_simpleMatch1.5.3

cmsmadesimplecms_made_simpleMatch1.5.4

cmsmadesimplecms_made_simpleMatch1.6

cmsmadesimplecms_made_simpleMatch1.6.1

cmsmadesimplecms_made_simpleMatch1.6.2

cmsmadesimplecms_made_simpleMatch1.6.3

cmsmadesimplecms_made_simpleMatch1.6.4

cmsmadesimplecms_made_simpleMatch1.6.5

cmsmadesimplecms_made_simpleMatch1.6.6

cmsmadesimplecms_made_simpleMatch1.6.7

cmsmadesimplecms_made_simpleMatch1.6.8

cmsmadesimplecms_made_simpleMatch1.7

CPENameOperatorVersion
cmsmadesimple:cms_made_simplecmsmadesimple cms made simplele1.7.1
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.10
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.10.3
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.10.4
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.11
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.11.1
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.11.2
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.12
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.12.1
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.12.2

CPE	Name	Operator	Version
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	le	1.7.1
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.10
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.10.3
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.10.4
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.11
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.11.1
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.11.2
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.12
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.12.1
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.12.2

Rows per page:

1-10 of 501

References

secunia.com/advisories/40031

security.bkis.com/multiple-vulnerabilities-in-cms-made-simple/

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.5%

JSON

Related for CVE-2010-3883

prion1 nvd1 cvelist1