PT-2005-3913 · Cms Made Simple · Cms Made Simple

X1Ngbox · Published 2005-09-27 · Updated 2016-10-18 · CVE-2005-3083

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 0.10

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the page parameter in the index.php file. This could lead to unauthorized actions on the affected system.

Recommendations For CMS Made Simple version 0.10, consider disabling the index.php file or restricting access to it until a patch is available. Avoid using the page parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2005-3083

Affected Products

Cms Made Simple

References · 5

• 🔥 https://exploit-db.com/exploits/26298 · Exploit
• 🔥 http://securityfocus.com/bid/14937 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-3083 · Security Note
• http://marc.info/?l=bugtraq&m=112785315518373&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3083 · Note