Browse CVEs

MEDIUM 6.1 CVE-2017-9668 In admin\addgroup.php in CMS Made Simple 2.1.6, when adding a user group, there is no XSS filtering, resulting in storage-type XSS generation, via th… Cms Made Simple Mitigation only Fix from $1,6002017-06-18 MEDIUM 5.4 CVE-2017-7255 XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_title parameter. Someone must login to conduct the … Cms Made Simple No fix yet Fix from $1,6002017-03-24 MEDIUM 5.4 CVE-2017-7256 XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_summary parameter. Someone must login to conduct th… Cms Made Simple No fix yet Fix from $1,6002017-03-24 MEDIUM 5.4 CVE-2017-7257 XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_content parameter. Someone must login to conduct th… Cms Made Simple No fix yet Fix from $1,6002017-03-24 MEDIUM 5.4 CVE-2017-6555 Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary… Cms Made Simple No fix yet Fix from $1,6002017-03-09 MEDIUM 5.4 CVE-2017-6556 Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML vi… Cms Made Simple No fix yet Fix from $1,6002017-03-09 MEDIUM 5.0 CVE-2011-3718 CMS Made Simple (CMSMS) 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installa… Cms Made Simple No fix yet Fix from $1,6002011-09-23 MEDIUM 5.0 CVE-2008-5642EPSS 9% Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a… Cms Made Simple No fix yet Fix from $1,6002008-12-17 MEDIUM 6.5 CVE-2007-5441 CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some … Cms Made Simple Mitigation only Fix from $1,6002007-10-14 MEDIUM 5.0 CVE-2007-5444 CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files. Cms Made Simple No fix yet Fix from $1,6002007-10-14 MEDIUM 6.8 CVE-2007-0610 Cross-site scripting (XSS) vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attackers to inject arbitrary web script or HTML … Cms Made Simple Mitigation only Fix from $1,6002007-01-31 HIGH 7.5 CVE-2007-0551 Multiple PHP remote file inclusion vulnerabilities in cmsimple/cms.php in CMSimple 2.7 allow remote attackers to execute arbitrary PHP code via a URL… Cms Made Simple Mitigation only Fix from $1,9502007-01-29 MEDIUM 6.8 CVE-2006-6844 Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web… Cms Made Simple No fix yet Fix from $1,6002006-12-31 MEDIUM 6.8 CVE-2006-6845 Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the… Cms Made Simple Mitigation only Fix from $1,6002006-12-31