PT-2005-3913 · Cms Made Simple · Cms Made Simple

X1Ngbox · Publicado 2005-09-27 · Atualizado 2016-10-18 · CVE-2005-3083

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 0.10

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the page parameter in the index.php file. This could lead to unauthorized actions on the affected system.

Recommendations For CMS Made Simple version 0.10, consider disabling the index.php file or restricting access to it until a patch is available. Avoid using the page parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2005-3083

Produtos afetados

Cms Made Simple

Referências · 5

• 🔥 https://exploit-db.com/exploits/26298 · Exploit
• 🔥 http://securityfocus.com/bid/14937 · Exploit
• http://marc.info/?l=bugtraq&m=112785315518373&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3083 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3083 · Nota