PT-2018-9939

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions prior to 2.2.8 Description: The issue concerns a remote code execution vulnerability in the "module import" operation within the admin dashboard. This vulnerability can be exploited by an admin user, as an XML Package...

PT-2018-9938

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions prior to 2.2.8 Description: The issue concerns a sensitive information disclosure vulnerability in the "file rename" operation within the admin dashboard. This vulnerability can be exploited by an admin user and may...

PT-2018-9940

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions prior to 2.2.8 Description: The issue allows for arbitrary file deletion, potentially leading to a denial of service DoS, and can be exploited by an admin user. This is because an attacker can remove all lib/ files in...

PT-2018-9937

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions prior to 2.2.8 Description: The issue concerns a remote code execution vulnerability in the "file unpack" operation within the admin dashboard. This vulnerability can be exploited by an admin user, as a .php file can ...

PT-2018-9943

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions prior to 2.2.8 Description: The issue concerns an arbitrary file movement vulnerability in the "file move" operation within the admin dashboard. This can lead to a denial-of-service DoS condition. The vulnerability is...

PT-2018-9945

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions through 2.2.7 Description: The issue concerns a physical path leakage via several API endpoints, including "/modules/DesignManager/action.ajax get templates.php", "/modules/DesignManager/action.ajax get...

Code Execution Vulnerability in cms made simple Backend Package Release

CMS Made Simple is an open source content management system. It is built using PHP and Smarty Engine , which separates content , functionality and templates . cms made simple version 2.2.7 code execution vulnerability exists in the background when decompressing the uploaded zip package , due to t...

PT-2018-9942

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions prior to 2.2.8 Description: The issue concerns an arbitrary file deletion vulnerability in the "module remove" operation within the admin dashboard. This can lead to a denial-of-service DoS condition. An attacker, who...

CVE-2018-10517: Improper Control of Generation of Code

In CMS Made Simple CMSMS through 2.2.7, the "module import" operation in the admin dashboard contains a remote code execution vulnerability, exploitable by an admin user, because an XML Package can contain base64-encoded PHP code in a data element...

CVE-2018-10523: Exposure of Sensitive Information to an Unauthorized Actor

CMS Made Simple CMSMS through 2.2.7 contains a physical path leakage Vulnerability via /modules/DesignManager/action.ajaxgettemplates.php, /modules/DesignManager/action.ajaxgetstylesheets.php, /modules/FileManager/dunzip.php, or /modules/FileManager/untgz.php...

CVE-2018-10519: Incorrect Permission Assignment for Critical Resource

CMS Made Simple CMSMS 2.2.7 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the effuid value within $COOKIE$this-loginkey to equal 1, because files in the tmp/ directory are accessible through HTTP requests. NOTE: this vulnerability exists because o...

CVE-2018-10520: Incorrect Permission Assignment for Critical Resource

In CMS Made Simple CMSMS through 2.2.7, the "module remove" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause DoS, exploitable by an admin user, because the attacker can remove all lib/ files in all directories...

CMS Made Simple Directory Traversal Vulnerability

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A directory traversal vulnerability exists in CMSM...

CVE-2018-9921

In CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible to determine the existence of files and directories outside the web-site installation directory, and determine whether a file has contents matching a specified checksum. The attack uses an admin/checksum.php?c= request...

Directory traversal

In CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible to determine the existence of files and directories outside the web-site installation directory, and determine whether a file has contents matching a specified checksum. The attack uses an admin/checksum.php?c= request...

CVE-2018-9921

CVE-2018-9921 affects CMS Made Simple 2.2.7. The vulnerability is a directory traversal allowing an attacker to determine the existence of files/directories outside the installation and whether a file’s contents match a given checksum via an admin/checksum.php?__c= request. This is a information-...

CVE-2018-9921

In CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible to determine the existence of files and directories outside the web-site installation directory, and determine whether a file has contents matching a specified checksum. The attack uses an admin/checksum.php?c= request...

PT-2018-19089

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.7 Description A Directory Traversal issue allows an attacker to determine the existence of files and directories outside the web-site installation directory. It also enables checking if a file has contents matching ...

CVE-2018-9921: Improper Limitation of a Pathname to a Restricted Directory

In CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible to determine the existence of files and directories outside the web-site installation directory, and determine whether a file has contents matching a specified checksum. The attack uses an admin/checksum.php?c= request...

CVE-2018-1000158

cmsmadesimple version 2.2.7 contains a Incorrect Access Control vulnerability in the function of sendrecoveryemail in the line "$url = $config'adminurl' . '/login.php?recoverme=' . $code;" that can result in Administrator Password Reset Poisoning, specifically a reset URL pointing at an attacker...