Lucene search

[email protected]CVE-2012-5450

HistoryDec 03, 2012 - 9:55 p.m.

CVE-2012-5450

2012-12-0321:55:01

CWE-352

[email protected]

web.nvd.nist.gov

csrf

vulnerability

cms made simple

cmsms

nvd

cve-2012-5450

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.8%

JSON

Cross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) 1.11.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deld parameter.

Affected configurations

NVD

Node

cmsmadesimplecms_made_simpleRange≤1.11.2

cmsmadesimplecms_made_simpleMatch0.1

cmsmadesimplecms_made_simpleMatch0.2

cmsmadesimplecms_made_simpleMatch0.2.1

cmsmadesimplecms_made_simpleMatch0.3

cmsmadesimplecms_made_simpleMatch0.3.1

cmsmadesimplecms_made_simpleMatch0.3.2

cmsmadesimplecms_made_simpleMatch0.4

cmsmadesimplecms_made_simpleMatch0.4.1

cmsmadesimplecms_made_simpleMatch0.5

cmsmadesimplecms_made_simpleMatch0.5.1

cmsmadesimplecms_made_simpleMatch0.6

cmsmadesimplecms_made_simpleMatch0.6.1

cmsmadesimplecms_made_simpleMatch0.6.2

cmsmadesimplecms_made_simpleMatch0.6.3

cmsmadesimplecms_made_simpleMatch0.7

cmsmadesimplecms_made_simpleMatch0.7.1

cmsmadesimplecms_made_simpleMatch0.7.2

cmsmadesimplecms_made_simpleMatch0.7.3

cmsmadesimplecms_made_simpleMatch0.8

cmsmadesimplecms_made_simpleMatch0.8.1

cmsmadesimplecms_made_simpleMatch0.8.2

cmsmadesimplecms_made_simpleMatch0.9

cmsmadesimplecms_made_simpleMatch0.9.1

cmsmadesimplecms_made_simpleMatch0.9.2

cmsmadesimplecms_made_simpleMatch0.10

cmsmadesimplecms_made_simpleMatch0.10.1

cmsmadesimplecms_made_simpleMatch0.10.2

cmsmadesimplecms_made_simpleMatch0.10.3

cmsmadesimplecms_made_simpleMatch0.10.4

cmsmadesimplecms_made_simpleMatch0.11

cmsmadesimplecms_made_simpleMatch0.11.1

cmsmadesimplecms_made_simpleMatch0.11.2

cmsmadesimplecms_made_simpleMatch0.12

cmsmadesimplecms_made_simpleMatch0.12.1

cmsmadesimplecms_made_simpleMatch0.12.2

cmsmadesimplecms_made_simpleMatch0.13

cmsmadesimplecms_made_simpleMatch1.0

cmsmadesimplecms_made_simpleMatch1.0.1

cmsmadesimplecms_made_simpleMatch1.0.2

cmsmadesimplecms_made_simpleMatch1.0.3

cmsmadesimplecms_made_simpleMatch1.0.4

cmsmadesimplecms_made_simpleMatch1.0.5

cmsmadesimplecms_made_simpleMatch1.0.6

cmsmadesimplecms_made_simpleMatch1.1

cmsmadesimplecms_made_simpleMatch1.1.1

cmsmadesimplecms_made_simpleMatch1.1.2

cmsmadesimplecms_made_simpleMatch1.1.3

cmsmadesimplecms_made_simpleMatch1.1.3.1

cmsmadesimplecms_made_simpleMatch1.1.4

cmsmadesimplecms_made_simpleMatch1.2

cmsmadesimplecms_made_simpleMatch1.2.1

cmsmadesimplecms_made_simpleMatch1.2.2

cmsmadesimplecms_made_simpleMatch1.2.3

cmsmadesimplecms_made_simpleMatch1.2.4

cmsmadesimplecms_made_simpleMatch1.2.5

cmsmadesimplecms_made_simpleMatch1.3

cmsmadesimplecms_made_simpleMatch1.3beta1

cmsmadesimplecms_made_simpleMatch1.3beta2

cmsmadesimplecms_made_simpleMatch1.4

cmsmadesimplecms_made_simpleMatch1.4.1

cmsmadesimplecms_made_simpleMatch1.5

cmsmadesimplecms_made_simpleMatch1.5.1

cmsmadesimplecms_made_simpleMatch1.5.2

cmsmadesimplecms_made_simpleMatch1.5.3

cmsmadesimplecms_made_simpleMatch1.5.4

cmsmadesimplecms_made_simpleMatch1.6

cmsmadesimplecms_made_simpleMatch1.6.1

cmsmadesimplecms_made_simpleMatch1.6.2

cmsmadesimplecms_made_simpleMatch1.6.3

cmsmadesimplecms_made_simpleMatch1.6.4

cmsmadesimplecms_made_simpleMatch1.6.5

cmsmadesimplecms_made_simpleMatch1.6.6

cmsmadesimplecms_made_simpleMatch1.6.7

cmsmadesimplecms_made_simpleMatch1.7

cmsmadesimplecms_made_simpleMatch1.7.1

cmsmadesimplecms_made_simpleMatch1.8

cmsmadesimplecms_made_simpleMatch1.8.1

cmsmadesimplecms_made_simpleMatch1.8.2

cmsmadesimplecms_made_simpleMatch1.9

cmsmadesimplecms_made_simpleMatch1.9.1

cmsmadesimplecms_made_simpleMatch1.9.2

cmsmadesimplecms_made_simpleMatch1.9.3

cmsmadesimplecms_made_simpleMatch1.9.4

cmsmadesimplecms_made_simpleMatch1.9.4.1

cmsmadesimplecms_made_simpleMatch1.9.4.2

CPENameOperatorVersion
cmsmadesimple:cms_made_simplecmsmadesimple cms made simplele1.11.2
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.1
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.2
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.2.1
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.3
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.3.1
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.3.2
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.4
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.4.1
cmsmadesimple:cms_made_simplecmsmadesimple cms made simpleeq0.5

CPE	Name	Operator	Version
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	le	1.11.2
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.1
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.2
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.2.1
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.3
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.3.1
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.3.2
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.4
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.4.1
cmsmadesimple:cms_made_simple	cmsmadesimple cms made simple	eq	0.5

Rows per page:

1-10 of 841

References

archives.neohapsis.com/archives/bugtraq/2012-11/0035.html

forum.cmsmadesimple.org/viewtopic.php?f=1&t=63545

packetstormsecurity.org/files/117951/CMS-Made-Simple-1.11.2-Cross-Site-Request-Forgery.html

secunia.com/advisories/51185

viewsvn.cmsmadesimple.org/diff.php?repname=cmsmadesimple&path=%2Ftrunk%2Flib%2Ffilemanager%2FImageManager%2FClasses%2FImageManager.php&rev=8400&peg=8498

exchange.xforce.ibmcloud.com/vulnerabilities/79881

www.htbridge.com/advisory/HTB23121