Cms Made Simple@* Security Vulnerabilities and Issues — Cms Made Simple@* CVE List

Lucene search

CmsmadesimpleCms Made Simple*

6 matches found

CVE•added 2017/02/21 7:59 a.m.•47 views

CVE-2017-6072

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaultadmin.

5.3CVSS5.4AI score0.00244EPSS

CVE•added 2017/02/21 7:59 a.m.•46 views

CVE-2017-6071

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml.

5.3CVSS5.4AI score0.00312EPSS

CVE•added 2017/12/18 6:29 a.m.•44 views

CVE-2017-17735

CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies.

9.8CVSS9.2AI score0.00275EPSS

CVE•added 2017/12/18 6:29 a.m.•43 views

CVE-2017-17734

CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions.

9.8CVSS9.2AI score0.00275EPSS

CVE•added 2017/02/21 7:59 a.m.•41 views

CVE-2017-6070

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.

9.8CVSS9.6AI score0.00799EPSS

CVE•added 2017/01/16 6:59 a.m.•36 views

CVE-2016-7904

Cross-site request forgery (CSRF) vulnerability in CMS Made Simple before 2.1.6 allows remote attackers to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request.

8CVSS8.1AI score0.00094EPSS