EUVD-2018-2113

Malware in sbrugna...

CVE-2020-22842

CMS Made Simple before 2.2.15 allows XSS via the m1mod parameter in a ModuleManager localuninstall action to admin/moduleinterface.php...

CVE-2020-22842

CMS Made Simple (CMSMS) before version 2.2.15 is affected by CVE-2020-22842 due to an XSS vulnerability in the ModuleManager local_uninstall action that processes the m1_mod parameter in admin/moduleinterface.php. The underlying issue is insufficient input validation of this parameter, allowing a...

CVE-2020-22842: Improper Neutralization of Input During Web Page Generation

CMS Made Simple before 2.2.15 allows XSS via the m1mod parameter in a ModuleManager localuninstall action to admin/moduleinterface.php...

PT-2020-14064

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.14 Description The issue allows for XSS via a Search Term to the "admin/moduleinterface.php?mact=ModuleManager" page. Recommendations For CMS Made Simple version 2.2.14, update to a newer version that contains a fix...

CVE-2020-14926: Improper Neutralization of Input During Web Page Generation

CMS Made Simple 2.2.14 allows XSS via a Search Term to the admin/moduleinterface.php?mact=ModuleManager page...

CVE-2020-10681

The Filemanager in CMS Made Simple 2.2.13 has stored XSS via a .pxd file, as demonstrated by m1files to admin/moduleinterface.php...

CVE-2020-10681

The Filemanager in CMS Made Simple 2.2.13 has stored XSS via a .pxd file, as demonstrated by m1files to admin/moduleinterface.php...

CVE-2020-10681

The Filemanager in CMS Made Simple 2.2.13 has stored XSS via a .pxd file, as demonstrated by m1files to admin/moduleinterface.php...

CVE-2020-10681: Improper Neutralization of Input During Web Page Generation

The Filemanager in CMS Made Simple 2.2.13 has stored XSS via a .pxd file, as demonstrated by m1files to admin/moduleinterface.php...

PT-2020-12282

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.13 Description The issue allows remote code execution via a specially crafted .php.jpegd JPEG file. This can be achieved by sending a file as application/octet-stream to the admin/moduleinterface.php endpoint,...

CVE-2020-10682: Unrestricted Upload of File with Dangerous Type

The Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file, as demonstrated by m1files to admin/moduleinterface.php. The file should be sent as application/octet-stream and contain PHP code it need not be a valid JPEG file...

PT-2020-12281

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.13 Description The issue concerns a stored XSS vulnerability in the Filemanager component. This can be exploited via a .pxd file, as shown by sending m1 files to the "admin/moduleinterface.php" endpoint...

CVE-2018-18271: Improper Neutralization of Input During Web Page Generation

XSS exists in CMS Made Simple version 2.2.7 via the m1extra parameter in an admin/moduleinterface.php "Content--News--Add Article" action...

PT-2018-14389

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.7 Description A security issue exists due to the presence of XSS in the m1 extra parameter within the "Content--News--Add Article" action in the admin/moduleinterface.php file. Recommendations For CMS Made Simple...

PT-2018-14388

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.7 Description A security issue exists due to the presence of XSS in the m1 news url parameter. This issue is specifically found in the "Content--News--Add Article" action within the admin/moduleinterface.php file...

CVE-2018-18270: Improper Neutralization of Input During Web Page Generation

XSS exists in CMS Made Simple version 2.2.7 via the m1newsurl parameter in an admin/moduleinterface.php "Content--News--Add Article" action...

Design/Logic Flaw

CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1version parameter...

CVE-2018-10029

CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799...

CVE-2018-10032

CMS Made Simple (CMSMS) 2.2.7 contains a Reflected XSS in admin/moduleinterface.php via the m1_version parameter. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE lists) as a reflection vulnerability in CMSMS 2.2.7; details consistently indicate the vulnerable component is...