CVE-2018-10029

CMS Made Simple (CMSMS) 2.2.7 is cited as having a Reflected XSS flaw in admin/moduleinterface.php via the m1_name parameter (linked to moduledepends). This CVE-2018-10029 description is explicitly differentiated from CVE-2017-16799. Across connected sources (CNVD, RH Red Hat, CNVD CNVD-2017-3650...

CVE-2018-10031

CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/moduleinterface.php...

CVE-2018-10031

CVE-2018-10031 concerns CMS Made Simple (CMSMS) 2.2.7, where a Cross-Site Request Forgery (CSRF) flaw exists in admin/moduleinterface.php. Multiple connected sources corroborate that this is a CSRF vulnerability specific to CMSMS 2.2.7, with the CVE entry describing a CSRF in the admin interface....

CVE-2018-10030

CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/siteprefs.php...

CVE-2018-10029

CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799...

Elevation of Privilege Vulnerability in CMS Made Simple

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engines. An elevation of privilege vulnerability exists in CMS Made Simple. An attacker can exploit the vulnerability to bypass anti-forgery checks on data and gain access to backend...

CMS Made Simple has a deserialization vulnerability

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A deserialization vulnerability exists in CMS Made Simple. An attacker can exploit the vulnerability to delete arbitrary files from the server...

BadMod - Detect Website CMS, Website Scanner & Auto Exploiter

Auto exploiter & get all server sites & bing dorker Installation git clone https://github.com/MrSqar-Ye/BadMod.git BadMod tool Detect website cms & website scanner =& Auto exploiter Exploit : ! Wordpress +joomla !drupal + Cms made simple Video Download BadMod...

CMS Made Simple <= 2.2.6 Multiple Stored XSS Vulnerabilities

CMS Made Simple is prone to multiple stored cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

CMS Made Simple Cross-Site Request Forgery Vulnerability (CNVD-2018-07059)

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A cross-site request forgery vulnerability exists in the Admin profile page in CMS Made Simple 2.2.5. A remote attacker can exploit this vulnerability to cause a denial of...

CVE-2018-1000092

CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery CSRF vulnerability in Admin profile page that can result in Details can be found here http://dev.cmsmadesimple.org/bug/view/11715. This attack appear to be exploitable via A specially crafted web page. This vulnerability...

CVE-2018-1000092

CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery CSRF vulnerability in Admin profile page that can result in Details can be found here http://dev.cmsmadesimple.org/bug/view/11715. This attack appear to be exploitable via A specially crafted web page. This vulnerability...

Cross site request forgery (csrf)

CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery CSRF vulnerability in Admin profile page that can result in Details can be found here http://dev.cmsmadesimple.org/bug/view/11715. This attack appear to be exploitable via A specially crafted web page. This vulnerability...

CVE-2018-1000092

CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery CSRF vulnerability in Admin profile page that can result in Details can be found here http://dev.cmsmadesimple.org/bug/view/11715. This attack appear to be exploitable via A specially crafted web page. This vulnerability...

CVE-2018-1000092

CMS Made Simple 2.2.5 is affected by a CSRF vulnerability in the Admin profile page; attacker could trigger unauthorized actions via a specially crafted page. The issue appears fixed in 2.2.6. Public details consistently describe CSRF as the vulnerability class and mention potential denial-of-ser...

CVE-2018-1000094

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload - copy to any extension...

CVE-2018-1000094

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload - copy to any extension...

Remote code execution

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload - copy to any extension...

CVE-2018-1000094

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload - copy to any extension...

CVE-2018-1000094

CVE-2018-1000094 affects CMS Made Simple 2.2.5. The vulnerability is a remote code execution via the File Manager, exploitable by an authenticated administrator who can upload a file and copy/rename it to a PHP extension, enabling execution of arbitrary code on the server (e.g., via a PHP shell)....