İçeriğe atla
Noroxi

Cmsmadesimple kayıtları

cmsmadesimple üreticisine ait 157 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
4 · %2,5
Pre-auth RCE
8
Düzeltme kaydı olan
%0,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

157 kayıt
  • CVE-2019-9053
    53Planlayın

    An issue was discovered in CMS Made Simple 2.2.8.

    YüksekCVSS 8,1Kavram kanıtıEPSS %68

    cmsmadesimple · cms made simple26 Mar 2019

  • CVE-2023-36969
    50Planlayın

    CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %49

    cmsmadesimple · cms made simple6 Tem 2023

  • CVE-2017-16783
    41Planlayın

    In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %7

    cmsmadesimple · cms made simple10 Kas 2017

  • CVE-2019-9692
    40Planlayın

    class.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a watermark file has a standard image file extension

    OrtaCVSS 6,5SilahlaştırılmışEPSS %45

    cmsmadesimple · cms made simple11 Mar 2019

  • CVE-2018-1000094
    40Planlayın

    CMS Made Simple version 2.2.5 contains a Remote Code Execution vulnerability in File Manager that can result in Allows an authenticated admi

    YüksekCVSS 7,2SilahlaştırılmışEPSS %38

    cmsmadesimple · cms made simple12 Mar 2018

  • CVE-2019-9055
    40Planlayın

    An issue was discovered in CMS Made Simple 2.2.8.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %12

    cmsmadesimple · cms made simple26 Mar 2019

  • CVE-2018-10085
    40Planlayın

    CMS Made Simple (CMSMS) through 2.2.6 allows PHP object injection because of an unserialize call in the _get_data function of \lib\classes\i

    KritikCVSS 9,8İstismar yokEPSS %3

    cmsmadesimple · cms made simple13 Nis 2018

  • CVE-2017-6070
    40Planlayın

    CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_t

    KritikCVSS 9,8İstismar yokEPSS %2

    cmsmadesimple · form builder21 Şub 2017

  • CVE-2017-1000453
    40Planlayın

    CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP c

    KritikCVSS 9,8İstismar yokEPSS %1

    cmsmadesimple · cms made simple2 Oca 2018

  • CVE-2010-4663
    40Planlayın

    Unspecified vulnerability in the News module in CMS Made Simple (CMSMS) before 1.9.1 has unknown impact and attack vectors.

    KritikCVSS 10,0İstismar yokEPSS %1

    cmsmadesimple · cms made simple8 Haz 2011

  • CVE-2018-10081
    39İzleyin

    CMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonst

    KritikCVSS 9,8İstismar yokEPSS %1

    cmsmadesimple · cms made simple13 Nis 2018

  • CVE-2017-17735
    39İzleyin

    CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies.

    KritikCVSS 9,8İstismar yokEPSS %1

    cmsmadesimple · cms made simple18 Ara 2017

  • CVE-2017-17734
    39İzleyin

    CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions.

    KritikCVSS 9,8İstismar yokEPSS %1

    cmsmadesimple · cms made simple18 Ara 2017

  • CVE-2021-40961
    36İzleyin

    CMS Made Simple <=2.2.15 is affected by SQL injection in modules/News/function.admin_articlestab.php.

    YüksekCVSS 8,8İstismar yokEPSS %1

    cmsmadesimple · cms made simple9 Haz 2022

  • CVE-2007-5056
    35İzleyin

    Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAP

    OrtaCVSS 6,8Kavram kanıtıEPSS %27

    adodb lite · adodb lite24 Eyl 2007

  • CVE-2019-9057
    35İzleyin

    An issue was discovered in CMS Made Simple 2.2.8.

    YüksekCVSS 8,8İstismar yokEPSS %1

    cmsmadesimple · cms made simple26 Mar 2019

  • CVE-2019-9061
    35İzleyin

    An issue was discovered in CMS Made Simple 2.2.8.

    YüksekCVSS 8,8İstismar yokEPSS %1

    cmsmadesimple · cms made simple26 Mar 2019

  • CVE-2021-28999
    35İzleyin

    SQL Injection vulnerability in CMS Made Simple through 2.2.15 allows remote attackers to execute arbitrary commands via the m1_sortby parame

    YüksekCVSS 8,8İstismar yokEPSS %1

    cmsmadesimple · cms made simple8 May 2023

  • CVE-2019-9056
    35İzleyin

    An issue was discovered in CMS Made Simple 2.2.8.

    YüksekCVSS 8,8İstismar yokEPSS %1

    cmsmadesimple · cms made simple11 Nis 2019

  • CVE-2019-9693
    35İzleyin

    In CMS Made Simple (CMSMS) before 2.2.10, an authenticated user can achieve SQL Injection in class.showtime2_data.php via the functions _upd

    YüksekCVSS 8,8İstismar yokEPSS %1

    cmsmadesimple · cms made simple11 Mar 2019

  • CVE-2018-1000158
    35İzleyin

    cmsmadesimple version 2.2.7 contains a Incorrect Access Control vulnerability in the function of send_recovery_email in the line "$url = $co

    YüksekCVSS 8,8İstismar yokEPSS %1

    cmsmadesimple · cms made simple18 Nis 2018

  • CVE-2018-10519
    35İzleyin

    CMS Made Simple (CMSMS) 2.2.7 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid va

    YüksekCVSS 8,8İstismar yokEPSS %0

    cmsmadesimple · cms made simple27 Nis 2018

  • CVE-2024-1527
    35İzleyin

    Unrestricted Upload of File with Dangerous Type in CMS Made Simple

    YüksekCVSS 8,8İstismar yokEPSS %0

    cmsmadesimple · cms made simple12 Mar 2024

  • CVE-2018-10084
    35İzleyin

    CMS Made Simple (CMSMS) through 2.2.6 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the ef

    YüksekCVSS 8,8İstismar yokEPSS %0

    cmsmadesimple · cms made simple13 Nis 2018

  • CVE-2018-10031
    35İzleyin

    CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/moduleinterface.php.

    YüksekCVSS 8,8İstismar yokEPSS %0

    cmsmadesimple · cms made simple11 Nis 2018