PT-2018-9637

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.7 Description: The issue is related to Reflected XSS in the admin/moduleinterface.php file via the m1 version parameter. Recommendations: For version 2.2.7, avoid using the m1 version parameter in the...

CVE-2018-10033: Improper Neutralization of Input During Web Page Generation

CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...

PT-2018-9638

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.7 Description: The issue is related to Stored XSS in the admin/siteprefs.php file via the metadata parameter. Recommendations: For version 2.2.7, update to a newer version that contains a fix for this issue...

CVE-2018-10032: Improper Neutralization of Input During Web Page Generation

CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1version parameter...

CVE-2018-10030: Cross-Site Request Forgery (CSRF)

CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/siteprefs.php...

CVE-2018-10031: Cross-Site Request Forgery (CSRF)

CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/moduleinterface.php...

CVE-2018-10029: Improper Neutralization of Input During Web Page Generation

CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799...

PT-2018-9635

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.7 Description: The issue concerns a CSRF problem located in the admin/siteprefs.php file. Recommendations: For version 2.2.7, update to a newer version that contains a fix for this issue...

CMS Made Simple has a deserialization vulnerability

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A deserialization vulnerability exists in CMS Made Simple. An attacker can exploit the vulnerability to delete arbitrary files from the server...

Elevation of Privilege Vulnerability in CMS Made Simple

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engines. An elevation of privilege vulnerability exists in CMS Made Simple. An attacker can exploit the vulnerability to bypass anti-forgery checks on data and gain access to backend...

BadMod - Detect Website CMS, Website Scanner & Auto Exploiter

Auto exploiter & get all server sites & bing dorker Installation git clone https://github.com/MrSqar-Ye/BadMod.git BadMod tool Detect website cms & website scanner =& Auto exploiter Exploit : ! Wordpress +joomla !drupal + Cms made simple Video Download BadMod...

CMS Made Simple Cross-Site Request Forgery Vulnerability (CNVD-2018-07059)

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A cross-site request forgery vulnerability exists in the Admin profile page in CMS Made Simple 2.2.5. A remote attacker can exploit this vulnerability to cause a denial of...

CMS Made Simple <= 2.2.6 Multiple Stored XSS Vulnerabilities

CMS Made Simple is prone to multiple stored cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

CVE-2018-1000092

CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery CSRF vulnerability in Admin profile page that can result in Details can be found here http://dev.cmsmadesimple.org/bug/view/11715. This attack appear to be exploitable via A specially crafted web page. This vulnerability...

CVE-2018-1000092

CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery CSRF vulnerability in Admin profile page that can result in Details can be found here http://dev.cmsmadesimple.org/bug/view/11715. This attack appear to be exploitable via A specially crafted web page. This vulnerability...

Cross site request forgery (csrf)

CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery CSRF vulnerability in Admin profile page that can result in Details can be found here http://dev.cmsmadesimple.org/bug/view/11715. This attack appear to be exploitable via A specially crafted web page. This vulnerability...

CVE-2018-1000092

CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery CSRF vulnerability in Admin profile page that can result in Details can be found here http://dev.cmsmadesimple.org/bug/view/11715. This attack appear to be exploitable via A specially crafted web page. This vulnerability...

CVE-2018-1000092

CMS Made Simple 2.2.5 is affected by a CSRF vulnerability in the Admin profile page; attacker could trigger unauthorized actions via a specially crafted page. The issue appears fixed in 2.2.6. Public details consistently describe CSRF as the vulnerability class and mention potential denial-of-ser...

CVE-2018-1000094

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload - copy to any extension...

Remote code execution

CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admin that has access to the file manager to execute code on the server. This attack appear to be exploitable via File upload - copy to any extension...