GCVE - cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cmsmadesimple:cms_made_simple:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	Cmsmadesimple (`8ed73986-e506-5acb-a027-f2d81aed9376`)
Product	Cms Made Simple (`3c989cef-25f4-5ecb-b903-28c284166358`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:cmsmadesimple/cmsmadesimple`	purl2cpe	2026-06-01 10:12:04.252395
`pkg:github/cmsmadesimple/cmsmadesimple-2-0`	purl2cpe	2026-06-01 10:12:04.252396

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-2784`	vulnerable	2026-06-08 05:07:42.912543	Details available CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS) attacks via a crafted HTTP Host header in a request. Published: 2016-05-26T14:00:00.000Z Updated: 2024-08-05T23:32:21.148Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/136897/CMS-Made-Simple-Cache-Poisoning.html http://seclists.org/fulldisclosure/2016/May/15 http://www.securityfocus.com/archive/1/538272/100/0/threaded http://www.cmsmadesimple.org/2016/03/Announcing-CMSMS-1-12-2-kolonia/ https://www.exploit-db.com/exploits/39760/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2245`	vulnerable	2026-06-08 05:05:28.122697	Details available SQL injection vulnerability in the News module in CMS Made Simple (CMSMS) before 1.11.10 allows remote authenticated users with the "Modify News" permission to execute arbitrary SQL commands via the sortby parameter to admin/moduleinterface.php. NOTE: some of these details are obtained from third party information. Published: 2014-03-05T15:00:00.000Z Updated: 2024-08-06T10:05:59.903Z Open on db.gcve.eu Reference links http://secunia.com/advisories/56996 http://www.securityfocus.com/bid/65953 http://dev.cmsmadesimple.org/project/changelog/4602 http://seclists.org/oss-sec/2014/q1/467	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-6064`	vulnerable	2026-06-08 05:02:59.083926	Details available Directory traversal vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) before 1.11.2.1 allows remote authenticated administrators to delete arbitrary files via a .. (dot dot) in the deld parameter. NOTE: this can be leveraged using CSRF (CVE-2012-5450) to allow remote attackers to delete arbitrary files. Published: 2012-12-03T21:00:00.000Z Updated: 2024-08-06T21:21:28.835Z Open on db.gcve.eu Reference links http://packetstormsecurity.org/files/117951/CMS-Made-Simple-1.11.2-Cross-Site-Request-Forgery.html https://www.htbridge.com/advisory/HTB23121 http://secunia.com/advisories/51185 http://forum.cmsmadesimple.org/viewtopic.php?f=1&t=63545 https://exchange.xforce.ibmcloud.com/vulnerabilities/79881	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-5450`	vulnerable	2026-06-08 05:02:56.556775	Details available Cross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) 1.11.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deld parameter. Published: 2012-12-03T21:00:00.000Z Updated: 2024-08-06T21:05:47.231Z Open on db.gcve.eu Reference links http://packetstormsecurity.org/files/117951/CMS-Made-Simple-1.11.2-Cross-Site-Request-Forgery.html https://www.htbridge.com/advisory/HTB23121 http://secunia.com/advisories/51185 http://forum.cmsmadesimple.org/viewtopic.php?f=1&t=63545 https://exchange.xforce.ibmcloud.com/vulnerabilities/79881	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1992`	vulnerable	2026-06-08 05:00:52.227968	Details available Cross-site scripting (XSS) vulnerability in admin/edituser.php in CMS Made Simple 1.10.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the email parameter (aka the Email Address field in the Edit User template). Published: 2012-04-11T10:00:00.000Z Updated: 2024-08-06T19:17:27.642Z Open on db.gcve.eu Reference links http://www.webapp-security.com/wp-content/uploads/2012/04/CMS-Made-Simple-1.10.3-XSS-Vulnerability2.txt http://www.securityfocus.com/bid/52850	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4663`	vulnerable	2026-06-08 04:56:29.956476	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3883`	vulnerable	2026-06-08 04:55:17.742875	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3882`	vulnerable	2026-06-08 04:55:17.735334	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2797`	vulnerable	2026-06-08 04:55:10.707630	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1482`	vulnerable	2026-06-08 04:54:08.364206	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2392`	vulnerable	2026-06-08 04:48:29.230907	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.