Cms Made Simple@2.2.8 Security Vulnerabilities and Issues — Cms Made Simple@2.2.8 CVE List

Lucene search

CmsmadesimpleCms Made Simple2.2.8

2 matches found

CVE•added 2019/03/26 5:29 p.m.•224 views

CVE-2019-9053

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.

8.1CVSS8.2AI score0.92225EPSS

CVE•added 2019/04/11 8:29 p.m.•37 views

CVE-2019-9056

An issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers (in the file class.FrontEndUsersManipulate.php or class.FrontEndUsersManipulator.php), it is possible to reach an unserialize call with an untrusted FEU cookie, and achieve authenticated object injection.

8.8CVSS8.7AI score0.01225EPSS