Vulners
Lucene search
CMS Made Simple 2.1.6 Cross Site Scripting / Template Injection Vulnerabilities
| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
 | CMS Made Simple server-side template injection vulnerability | 13 Nov 201700:00 | – | cnvd |
| CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2017-36506) | 13 Nov 201700:00 | – | cnvd |
 | CVE-2017-16783 | 10 Nov 201723:00 | – | cve |
| CVE-2017-16784 | 10 Nov 201723:00 | – | cve |
 | CVE-2017-16783 | 10 Nov 201723:00 | – | cvelist |
| CVE-2017-16784 | 10 Nov 201723:00 | – | cvelist |
 | CMS Made Simple 2.1.6 - 'cntnt01detailtemplate' Server-Side Template Injection | 26 Oct 202000:00 | – | exploitdb |
 | EUVD-2017-7962 | 7 Oct 202500:30 | – | euvd |
 | CVE-2017-16783 | 10 Nov 201723:29 | – | nvd |
| CVE-2017-16784 | 10 Nov 201723:29 | – | nvd |
10
Affected Software : CMS Made Simple
Affected Versions: Tested on 2.1.6
Vendor Homepage : http://www.cmsmadesimple.org/
Vulnerability Type : Server-Side Template Injection
Severity : Important
Status : Fixed
CVE-ID : CVE-2017-16783
CVSS Base Score (3.0) :9.8
CVSS Vector String(3.0): AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Netsparker Advisory Reference : NS-17-32
Detailed write up:
https://www.netsparker.com/blog/web-security/exploiting-ssti-and-xss-in-cms-made-simple/
For more information:
https://www.netsparker.com/web-applications-advisories/ns-17-032-server-side-template-injection-vulnerability-in-cms-made-simple/
Affected Software : CMS Made Simple
Affected Versions: 2.2.2
Homepage : http://www.cmsmadesimple.org/
Vulnerability Type : Reflected XSS
Severity : Important
Status : Fixed
CVE-ID : CVE-2017-16784
CVSS Base Score (3.0) :6.3
CVSS Vector String(3.0): AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Netsparker Advisory Reference : NS-17-31
Proof of concept write up:
https://www.netsparker.com/blog/web-security/exploiting-ssti-and-xss-in-cms-made-simple/
Fore more information:
https://www.netsparker.com/web-applications-advisories/ns-17-031-reflected-xss-vulnerability-in-cms-made-simple/
# 0day.today [2018-01-09] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
28 Nov 2017 00:00Current
9.2High risk
Vulners AI Score9.2
EPSS0.09872