PT-2023-12131 · Unknown · Cms Made Simple

Riccardo Krauter · Published 2023-05-08 · Updated 2023-05-15 · CVE-2021-28999

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions prior to 2.2.16

Description The issue allows remote attackers to execute arbitrary commands. This is achieved via the m1 sortby parameter to the "modules/News/function.admin articlestab.php" endpoint.

Recommendations For CMS Made Simple versions prior to 2.2.16, update to version 2.2.16 or later to resolve the issue.

Exploit

Fix

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-28999

Affected Products

Cms Made Simple

References · 4

• 🔥 https://github.com/beerpwn/CVE/blob/master/cms_made_simple_2021/sqli_order_by/CMS-MS-SQLi-report.md · Exploit
• https://osv.dev/vulnerability/CVE-2021-28999 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28999 · Security Note
• https://seclists.org/fulldisclosure/2021/Mar/49 · Note