RSS   Vulnerabilities for 'Cms made simple'   RSS

2018-04-13
 
CVE-2018-10086

CWE-284
 

 
CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary code execution vulnerability in the admin dashboard because the implementation uses "eval('function testfunction'.rand()" and it is possible to bypass certain restrictions on these "testfunction" functions.

 
 
CVE-2018-10085

CWE-94
 

 
CMS Made Simple (CMSMS) through 2.2.6 allows PHP object injection because of an unserialize call in the _get_data function of \lib\classes\internal\class.LoginOperations.php. By sending a crafted cookie, a remote attacker can upload and execute code, or delete files.

 
 
CVE-2018-10084

CWE-310
 

 
CMS Made Simple (CMSMS) through 2.2.6 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within $_COOKIE[$this->_loginkey] to equal 1, because an SHA-1 cryptographic protection mechanism can be bypassed.

 
 
CVE-2018-10083

CWE-22
 

 
CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard via directory traversal sequences in the val parameter within a cmd=del request, because code under modules\FilePicker does not restrict the val parameter.

 
 
CVE-2018-10082

CWE-200
 

 
CMS Made Simple (CMSMS) through 2.2.7 allows physical path leakage via an invalid /index.php?page= value, a crafted URI starting with /index.php?mact=Search, or a direct request to /admin/header.php, /admin/footer.php, /lib/tasks/class.ClearCache.task.php, or /lib/tasks/class.CmsSecurityCheck.task.php.

 
 
CVE-2018-10081

CWE-640
 

 
CMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring.

 
2018-04-11
 
CVE-2018-10033

CWE-79
 

 
CMS Made Simple (aka CMSMS) 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter.

 
 
CVE-2018-10032

CWE-79
 

 
CMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1_version parameter.

 
 
CVE-2018-10031

CWE-352
 

 
CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/moduleinterface.php.

 
 
CVE-2018-10030

CWE-352
 

 
CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/siteprefs.php.

 


Copyright 2018, cxsecurity.com

 

Back to Top