76 matches found
Cross site request forgery (csrf)
CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/moduleinterface.php...
CVE-2018-10031
CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/moduleinterface.php...
CVE-2018-10032
CMS Made Simple (CMSMS) 2.2.7 contains a Reflected XSS in admin/moduleinterface.php via the m1_version parameter. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE lists) as a reflection vulnerability in CMSMS 2.2.7; details consistently indicate the vulnerable component is...
CVE-2018-10032
CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1version parameter...
CVE-2018-10029
CMS Made Simple (CMSMS) 2.2.7 is cited as having a Reflected XSS flaw in admin/moduleinterface.php via the m1_name parameter (linked to moduledepends). This CVE-2018-10029 description is explicitly differentiated from CVE-2017-16799. Across connected sources (CNVD, RH Red Hat, CNVD CNVD-2017-3650...
CVE-2018-10031
CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/moduleinterface.php...
CVE-2018-10029
CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799...
CVE-2018-10031
CVE-2018-10031 concerns CMS Made Simple (CMSMS) 2.2.7, where a Cross-Site Request Forgery (CSRF) flaw exists in admin/moduleinterface.php. Multiple connected sources corroborate that this is a CSRF vulnerability specific to CMSMS 2.2.7, with the CVE entry describing a CSRF in the admin interface....
CVE-2018-10031: Cross-Site Request Forgery (CSRF)
CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/moduleinterface.php...
CVE-2018-10029: Improper Neutralization of Input During Web Page Generation
CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799...
CVE-2018-10032: Improper Neutralization of Input During Web Page Generation
CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1version parameter...
Code injection
CMS Made Simple CMSMS 2.2.6 has XSS in admin/moduleinterface.php via the pagedata parameter...
CVE-2018-8058
CMS Made Simple CMSMS 2.2.6 has XSS in admin/moduleinterface.php via the pagedata parameter...
CVE-2018-8058
CMS Made Simple CMSMS 2.2.6 has XSS in admin/moduleinterface.php via the pagedata parameter...
CVE-2018-8058
CMS Made Simple CMSMS 2.2.6 has XSS in admin/moduleinterface.php via the pagedata parameter...
CVE-2018-7893
CVE-2018-7893 : CMS Made Simple (CMSMS) 2.2.6 is affected by a stored XSS in admin/moduleinterface.php via the metadata parameter. The CVSS data (NVD) lists a base score of 3.5 (LOW) under CVSS2 and 4.8 (MEDIUM) under CVSS3, with network attack vector and low impact on confidentiality/availabilit...
CVE-2018-8058
CMS Made Simple (CMSMS) 2.2.6 contains a cross‑site scripting (XSS) vulnerability in admin/moduleinterface.php via the pagedata parameter. Affected component: CMSMS core web interface; vulnerability type: stored XSS. The CVE and related OpenVAS entry indicate multiple stored XSS vulnerabilities i...
CVE-2018-7893: Improper Neutralization of Input During Web Page Generation
CMS Made Simple CMSMS 2.2.6 has stored XSS in admin/moduleinterface.php via the metadata parameter...