Vulnerability index

Browse CVEs

74 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Cms Made Simple MEDIUM 6.1
CVE-2017-9668

In admin\addgroup.php in CMS Made Simple 2.1.6, when adding a user group, there is no XSS filtering, resulting in storage-type XSS generation, via th…

Mitigation only
Fix from $1,600 2017-06-18
Cms Made Simple MEDIUM 5.4
CVE-2017-7255

XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_title parameter. Someone must login to conduct the …

No fix yet
Fix from $1,600 2017-03-24
Cms Made Simple MEDIUM 5.4
CVE-2017-7256

XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_summary parameter. Someone must login to conduct th…

No fix yet
Fix from $1,600 2017-03-24
Cms Made Simple MEDIUM 5.4
CVE-2017-7257

XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_content parameter. Someone must login to conduct th…

No fix yet
Fix from $1,600 2017-03-24
Cms Made Simple MEDIUM 5.4
CVE-2017-6555

Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary…

No fix yet
Fix from $1,600 2017-03-09
Cms Made Simple MEDIUM 5.4
CVE-2017-6556

Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML vi…

No fix yet
Fix from $1,600 2017-03-09
Cms Made Simple MEDIUM 5.0
CVE-2011-3718

CMS Made Simple (CMSMS) 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installa…

No fix yet
Fix from $1,600 2011-09-23
Cms Made Simple MEDIUM 5.0
CVE-2008-5642EPSS 9%

Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a…

No fix yet
Fix from $1,600 2008-12-17
Cms Made Simple MEDIUM 6.5
CVE-2007-5441

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some …

Mitigation only
Fix from $1,600 2007-10-14
Cms Made Simple MEDIUM 5.0
CVE-2007-5444

CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files.

No fix yet
Fix from $1,600 2007-10-14
Cms Made Simple MEDIUM 6.8
CVE-2007-0610

Cross-site scripting (XSS) vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attackers to inject arbitrary web script or HTML …

Mitigation only
Fix from $1,600 2007-01-31
Cms Made Simple HIGH 7.5
CVE-2007-0551

Multiple PHP remote file inclusion vulnerabilities in cmsimple/cms.php in CMSimple 2.7 allow remote attackers to execute arbitrary PHP code via a URL…

Mitigation only
Fix from $1,950 2007-01-29
Cms Made Simple MEDIUM 6.8
CVE-2006-6844

Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web…

No fix yet
Fix from $1,600 2006-12-31
Cms Made Simple MEDIUM 6.8
CVE-2006-6845

Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the…

Mitigation only
Fix from $1,600 2006-12-31