Design/Logic Flaw

In CMS Made Simple 2.2.3.1, the isfileacceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin or end with a "php" substring, which allows remote attackers to bypass intended access restrictions or trigger XSS via other extensions, as demonstrated by...

CVE-2017-16798

In CMS Made Simple 2.2.3.1, the isfileacceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin or end with a "php" substring, which allows remote attackers to bypass intended access restrictions or trigger XSS via other extensions, as demonstrated by...

CVE-2017-16799

In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible via the m1name parameter to admin/moduleinterface.php during addition of a category, a related issue to CVE-2010-3882...

CVE-2017-16799

CMS Made Simple is affected by CVE-2017-16799: a stored XSS in the New category flow. The vulnerability is in CMSMS 2.2.3.1, specifically via the m1_name parameter passed to admin/moduleinterface.php during category creation (module/action.addcategory.php). The issue enables injection of script/H...

CVE-2017-16798

CMS Made Simple 2.2.3.1 is vulnerable in is_file_acceptable() in modules/FileManager/action.upload.php, which only blocks file extensions containing the substring “php” and fails for other extensions (e.g., .phtml, .pht, .html, .svg). This can bypass access restrictions and enable XSS via uploade...

PT-2017-14568

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.3.1 Description The issue allows remote attackers to bypass intended access restrictions or trigger XSS via certain file extensions. This is because the is file acceptable function in...

PT-2017-14569

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.3.1 Description The issue allows for stored XSS via the m1 name parameter to "admin/moduleinterface.php" during the addition of a category. Recommendations For CMS Made Simple version 2.2.3.1, avoid using the m1 nam...

CVE-2017-16799: Improper Neutralization of Input During Web Page Generation

In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible via the m1name parameter to admin/moduleinterface.php during addition of a category, a related issue to CVE-2010-3882...

CVE-2017-16798: Improper Neutralization of Input During Web Page Generation

In CMS Made Simple 2.2.3.1, the isfileacceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin or end with a "php" substring, which allows remote attackers to bypass intended access restrictions or trigger XSS via other extensions, as demonstrated by...

CVE-2017-16783

In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter...

CVE-2017-16784

In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter...

Sql injection

In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter...

Cross site scripting

In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter...

CVE-2017-16784

In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter...

CVE-2017-16783

In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter...

CVE-2017-16783

In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter...

CVE-2017-16784

In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter...

CVE-2017-16783

CMS Made Simple 2.1.6 is affected by CVE-2017-16783: a Server-Side Template Injection issue exploited via the cntnt01detailtemplate parameter. Public references (NVD and exploit databases) describe a high-severity vulnerability with authenticated-free, network-exposed exploitation and impact to c...

CVE-2017-16784

CMS Made Simple 2.2.2 is affected by a Reflected XSS flaw exploitable via the cntnt01detailtemplate parameter. The vulnerability is described as Reflected XSS in multiple sources, with CVSS scores indicating a Medium impact (CVSSv3 base 6.1; CVSSv2 base 4.3). The connected documents confirm the v...

PT-2017-14556

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.1.6 Description The issue is related to Server-Side Template Injection. It can be exploited via the cntnt01detailtemplate parameter. Recommendations For CMS Made Simple version 2.1.6, consider restricting access to th...