2016-05-26 16:59:00 2018-10-09 21:59:41

CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS) attacks via a crafted HTTP Host header in a request.

Vector

NETWORK

Complexity

HIGH

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
CMS Made Simple 1.11.4 CMS Made Simple 1.11.3 CMS Made Simple 1.11.2.1 CMS Made Simple 1.11.2 CMS Made Simple 1.11.1 CMS Made Simple 1.11 CMS Made Simple 1.10.3 CMS Made Simple 1.10.2 CMS Made Simple 1.10.1 CMS Made Simple 1.10 CMS Made Simple 1.9.4.3 CMS Made Simple 1.9.4.2 CMS Made Simple 1.9.4.1 CMS Made Simple 1.9.4 CMS Made Simple 1.9.3 CMS Made Simple 1.9.2 CMS Made Simple 1.9.1 CMS Made Simple 1.9 CMS Made Simple 1.8.2 CMS Made Simple 1.8.1 CMS Made Simple 1.8 CMS Made Simple 1.7.1 CMS Made Simple 1.7 Cmsmadesimple Cms made simple 1.6.10 (not an official CPE) Cmsmadesimple Cms made simple 1.6.9 (not an official CPE) Cmsmadesimple Cms made simple 1.6.8 (not an official CPE) CMS Made Simple 1.6.7 CMS Made Simple 1.6.6 CMS Made Simple 1.6.5 CMS Made Simple 1.6.4 CMS Made Simple 1.6.3 CMS Made Simple 1.6.2 CMS Made Simple 1.6.1 CMS Made Simple 1.6 CMS Made Simple 1.5.4 CMS Made Simple 1.5.3 CMS Made Simple 1.5.2 CMS Made Simple 1.5.1 CMS Made Simple 1.5 CMS Made Simple 1.4.1 CMS Made Simple 1.4 Cmsmadesimple Cms made simple 1.3.1 (not an official CPE) CMS Made Simple 1.3 CMS Made Simple 1.2.5 CMS Made Simple 1.2.4 CMS Made Simple 1.2.3 CMS Made Simple 1.2.2 CMS Made Simple 1.2.1 CMS Made Simple 1.2 Cmsmadesimple Cms made simple 1.1.4.1 (not an official CPE) CMS Made Simple 1.1.3.1 CMS Made Simple 1.1.2 CMS Made Simple 1.1.1 CMS Made Simple 1.1 Cmsmadesimple Cms made simple 1.0.8 (not an official CPE) Cmsmadesimple Cms made simple 1.0.7 (not an official CPE) CMS Made Simple 1.0.6 CMS Made Simple 1.0.5 CMS Made Simple 1.0.4 CMS Made Simple 1.0.3 CMS Made Simple 1.0.2 CMS Made Simple 1.0.1 CMS Made Simple 1.0 CMS Made Simple 1.11.5 CMS Made Simple 1.11.6 CMS Made Simple 1.11.7 CMS Made Simple 1.11.8 CMS Made Simple 1.11.9 CMS Made Simple 1.11.10 Cmsmadesimple Cms made simple 1.11.11 (not an official CPE) Cmsmadesimple Cms made simple 1.11.12 (not an official CPE) Cmsmadesimple Cms made simple 1.11.13 (not an official CPE) Cmsmadesimple Cms made simple 1.12 (not an official CPE) Cmsmadesimple Cms made simple 1.12.1 (not an official CPE) Cmsmadesimple Cms made simple 2.0 (not an official CPE) Cmsmadesimple Cms made simple 2.0.1 (not an official CPE) Cmsmadesimple Cms made simple 2.0.1.1 (not an official CPE) CMSimple CMSimple 2.1 Cmsmadesimple Cms made simple 2.1.1 (not an official CPE) Cmsmadesimple Cms made simple 2.1.2 (not an official CPE)