Lucene search
+L

1274 matches found

OSV
OSV
added 2023/07/06 3:15 p.m.9 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

8.8CVSS5.8AI score0.49317EPSS
SaveExploits3References1
NVD
NVD
added 2023/07/06 3:15 p.m.33 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

8.8CVSS8.9AI score0.49317EPSS
SaveExploits3References1
ATTACKERKB
ATTACKERKB
added 2023/07/06 3:15 p.m.11 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

8.8CVSS7.4AI score0.49317EPSS
SaveExploits3References3
Prion
Prion
added 2023/07/06 3:15 p.m.24 views

Cross site scripting

A Cross-site scripting XSS vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function...

4.9CVSS5.4AI score0.00584EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2023/07/06 3:15 p.m.25 views

Design/Logic Flaw

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

6.5CVSS8.8AI score0.49317EPSS
SaveExploits3References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/06 12:00 a.m.13 views

CVE-2023-36970

A Cross-site scripting XSS vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function...

6.1AI score0.00584EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/07/06 12:00 a.m.8 views

PT-2023-25759 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.17 Description: A Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the File Upload function. Recommendations: For CMS Made Simple version 2.2.17, update to a version...

5.4CVSS5.6AI score0.00584EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/07/06 12:00 a.m.9 views

CMS Made Simple 跨站脚本漏洞

CMS Made Simple CMSMS is an open source content management system CMS by Cmsms team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMS Made Simple v2.2.17, whic...

5.4CVSS5.7AI score0.00584EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/07/06 12:00 a.m.44 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

9.1AI score0.49317EPSS
SaveExploits3References1
CVE
CVE
added 2023/07/06 12:00 a.m.126 views

CVE-2023-36969

CMS Made Simple v2.2.17 (and affected

8.8CVSS8.8AI score0.49317EPSS
SaveExploits3References1Affected Software1
CVE
CVE
added 2023/07/06 12:00 a.m.44 views

CVE-2023-36970

CMS Made Simple 2.2.17 is affected by a Cross-site Scripting (XSS) vulnerability that can be triggered via the File Upload function, allowing an attacker to inject arbitrary web script or HTML. The issue is documented across multiple feeds (CVE-2023-36970) and described as an XSS in CMS Made Simp...

5.4CVSS5.4AI score0.00584EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/06 12:00 a.m.22 views

PT-2023-25757 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.17 Description: The issue allows for Remote Command Execution via the File Upload Function. Recommendations: For CMS Made Simple version 2.2.17, update to a version that fixes this issue...

8.8CVSS8.8AI score0.49317EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
added 2023/07/06 12:00 a.m.17 views

CVE-2023-36969

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function...

7.4AI score0.49317EPSS
SaveExploits3References1
GithubExploit
GithubExploit
added 2023/05/29 5:59 p.m.73 views

Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple

CVE-2019-9053 Exploit Python 3 This repository contains an e...

8.1CVSS8.3AI score0.68581EPSS
SaveExploits38
OpenVAS
OpenVAS
added 2023/05/12 12:00 a.m.12 views

CMS Made Simple <= 2.2.16 File Upload Vulnerability

CMS Made Simple is prone to a file upload vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.2CVSS7AI score0.01294EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2023/05/12 12:00 a.m.23 views

CMS Made Simple <= 2.2.16 SQLi Vulnerability

CMS Made Simple is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS9.2AI score0.01332EPSS
SaveExploits1References2
OSV
OSV
added 2023/05/08 2:15 p.m.12 views

CVE-2021-28999

SQL Injection vulnerability in CMS Made Simple through 2.2.15 allows remote attackers to execute arbitrary commands via the m1sortby parameter to modules/News/function.adminarticlestab.php...

8.8CVSS6.1AI score0.01332EPSS
SaveExploits1References2
NVD
NVD
added 2023/05/08 2:15 p.m.32 views

CVE-2021-28998

File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via a crafted phar file...

7.2CVSS6.8AI score0.01294EPSS
SaveExploits1References2
OSV
OSV
added 2023/05/08 2:15 p.m.6 views

CVE-2021-28998

File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via a crafted phar file...

7.2CVSS5.8AI score0.01294EPSS
SaveExploits1References2
Prion
Prion
added 2023/05/08 2:15 p.m.23 views

Unrestricted file upload

File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via a crafted phar file...

5.8CVSS6.7AI score0.01294EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder