1905 matches found
CMS Made Simple Code Execution Vulnerability
CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in some core modul...
Design/Logic Flaw
CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution...
Design/Logic Flaw
CMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core components, resulting in local file read before 2.2, and local file inclusion since 2.2.1...
CVE-2017-1000453
CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution...
CVE-2017-1000454
CMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core components, resulting in local file read before 2.2, and local file inclusion since 2.2.1...
CVE-2017-1000453
CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution...
CVE-2017-1000454
CMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core components, resulting in local file read before 2.2, and local file inclusion since 2.2.1...
CVE-2017-1000453
CMS Made Simple versions 2.1.6 and 2.2 are affected by a Smarty templating injection in some core modules, enabling unauthenticated PHP code execution. The vulnerability stems from core module handling of Smarty templates (root cause as described). Impact is unauthenticated code execution with po...
CVE-2017-1000454
CVE-2017-1000454 affects CMS Made Simple versions 2.1.6, 2.2, and 2.2.1. Affected component: Smarty Template Injection in some core components. Impact: local file read prior to 2.2 and local file inclusion since 2.2.1. Documentation from multiple sources confirms vulnerability details; explicit r...
PT-2018-5220
Name of the Vulnerable Software and Affected Versions CMS Made Simple versions 2.1.6 through 2.2 Description The issue allows for Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution. Recommendations For CMS Made Simple version 2.1.6, update to a versi...
PT-2018-5221
Name of the Vulnerable Software and Affected Versions CMS Made Simple versions 2.1.6 through 2.2.1 Description The issue concerns Smarty Template Injection in core components, leading to local file read before version 2.2 and local file inclusion since version 2.2.1. Recommendations For CMS Made...
CVE-2017-1000454: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CMS Made Simple 2.1.6, 2.2, 2.2.1 are vulnerable to Smarty Template Injection in some core components, resulting in local file read before 2.2, and local file inclusion since 2.2.1...
CVE-2017-1000453: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution...
Unspecified Vulnerability in CMS Made Simple
CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMS Made Simple...
CVE-2017-17735
CMS Made Simple CMSMS before 2.2.5 does not properly cache login information in cookies...
CVE-2017-17734
CMS Made Simple CMSMS before 2.2.5 does not properly cache login information in sessions...
Design/Logic Flaw
CMS Made Simple CMSMS before 2.2.5 does not properly cache login information in sessions...
Information disclosure
CMS Made Simple CMSMS before 2.2.5 does not properly cache login information in cookies...