• info
• discussion
• exploit
• solution
• references

CMS Made Simple 1.1.3.1 Multiple Remote Vulnerabilities

CMS Made Simple is prone to multiple remote vulnerabilities including:

- An arbitrary PHP code-execution vulnerability.
- Multiple unauthorized-access vulnerabilities.
- Two cross-site scripting vulnerabilities
- 13 fullpath-disclosure vulnerabilities.

An attacker can exploit these issues to compromise the affected application, execute arbitrary PHP code with the privileges of the webserver process, steal cookie-based authentication credentials, and obtain sensitive information.

These issues affect CMS Made Simple 1.1.3.1; prior versions may also be affected.