1274 matches found
CMS Made Simple PHP Object Injection Vulnerability
CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A PHP object injection vulnerability exists in CMS...
CMS Made Simple admin/siteprefs.php Cross-Site Request Forgery Vulnerability
CMS Made Simple is a content management system developed using PHP, MySQL and Smarty template engine. A cross-site request forgery vulnerability exists in admin/siteprefs.php in CMS Made Simple 2.2.7. No detailed vulnerability details are provided at this time...
CMS Made Simple admin/siteprefs.php stored cross-site scripting vulnerability
CMS Made Simple is a content management system developed using PHP, MySQL and Smarty template engine. A stored cross-site scripting vulnerability exists in admin/siteprefs.php in CMS Made Simple 2.2.7. The vulnerability can be exploited to conduct cross-site scripting attacks via the metadata...
CMS Made Simple admin/moduleinterface.php Reflective Cross-Site Scripting Vulnerability
CMS Made Simple is a content management system developed using PHP, MySQL and Smarty template engine. A reflected cross-site scripting vulnerability exists in admin/moduleinterface.php in CMS Made Simple 2.2.7. An attacker can exploit this vulnerability via the m1name parameter to conduct a...
Code execution vulnerability in cms made simple v2.2.7 backend
CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A code execution vulnerability exists in the backe...
CVE-2018-10032
CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1version parameter...
CVE-2018-10033
CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...
CVE-2018-10029
CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799...
CVE-2018-10030
CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/siteprefs.php...
Cross site request forgery (csrf)
CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/siteprefs.php...
CVE-2018-10029
CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799...
Design/Logic Flaw
CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1version parameter...
CVE-2018-10031
CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/moduleinterface.php...
Cross site request forgery (csrf)
CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/moduleinterface.php...
Design/Logic Flaw
CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799...
CVE-2018-10033
CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...
Cross site scripting
CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...
CVE-2018-10032
CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1version parameter...