2019-03-11 19:29:00 2019-03-12 14:16:40

In CMS Made Simple (CMSMS) before 2.2.10, an authenticated user can achieve SQL Injection in class.showtime2_data.php via the functions _updateshow (parameter show_id), _inputshow (parameter show_id), _Getshowinfo (parameter show_id), _Getpictureinfo (parameter picture_id), _AdjustNameSeq (parameter shownumber), _Updatepicture (parameter picture_id), and _Deletepicture (parameter picture_id).

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Cmsmadesimple Cms made simple - (not an official CPE) CMS Made Simple 0.1 CMS Made Simple 0.2 CMS Made Simple 0.2.1 CMS Made Simple 0.3 CMS Made Simple 0.3.1 CMS Made Simple 0.3.2 CMS Made Simple 0.4 CMS Made Simple 0.4.1 CMS Made Simple 0.5 CMS Made Simple 0.5.1 CMS Made Simple 0.6 CMS Made Simple 0.6.1 CMS Made Simple 0.6.2 CMS Made Simple 0.6.3 CMS Made Simple 0.7 CMS Made Simple 0.7.1 CMS Made Simple 0.7.2 CMS Made Simple 0.7.3 CMS Made Simple 0.8 CMS Made Simple 0.8.1 CMS Made Simple 0.8.2 CMS Made Simple 0.9 CMS Made Simple 0.9.1 CMS Made Simple 0.9.2 CMS Made Simple 0.10 CMS Made Simple 0.10.1 CMS Made Simple 0.10.2 CMS Made Simple 0.10.3 CMS Made Simple 0.10.4 CMS Made Simple 0.11 CMS Made Simple 0.11.1 CMS Made Simple 0.11.2 CMS Made Simple 0.12 CMS Made Simple 0.12.1 CMS Made Simple 0.12.2 CMS Made Simple 0.13 CMS Made Simple 1.0 CMS Made Simple 1.0.1 CMS Made Simple 1.0.2 CMS Made Simple 1.0.3 CMS Made Simple 1.0.4 CMS Made Simple 1.0.5 CMS Made Simple 1.0.6 Cmsmadesimple Cms made simple 1.0.7 (not an official CPE) Cmsmadesimple Cms made simple 1.0.8 (not an official CPE) CMS Made Simple 1.1 CMS Made Simple 1.1.1 CMS Made Simple 1.1.2 CMS Made Simple 1.1.3 CMS Made Simple 1.1.3.1 CMS Made Simple 1.1.4 Cmsmadesimple Cms made simple 1.1.4.1 (not an official CPE) CMS Made Simple 1.2 CMS Made Simple 1.2.1 CMS Made Simple 1.2.2 CMS Made Simple 1.2.3 CMS Made Simple 1.2.4 CMS Made Simple 1.2.5 CMS Made Simple 1.3 CMS Made Simple 1.3 Beta 1 CMS Made Simple 1.3 Beta 2 Cmsmadesimple Cms made simple 1.3.1 (not an official CPE) CMS Made Simple 1.4 CMS Made Simple 1.4.1 CMS Made Simple 1.5 CMS Made Simple 1.5.1 CMS Made Simple 1.5.2 CMS Made Simple 1.5.3 CMS Made Simple 1.5.4 CMS Made Simple 1.6 CMS Made Simple 1.6.1 CMS Made Simple 1.6.2 CMS Made Simple 1.6.3 CMS Made Simple 1.6.4 CMS Made Simple 1.6.5 CMS Made Simple 1.6.6 CMS Made Simple 1.6.7 Cmsmadesimple Cms made simple 1.6.8 (not an official CPE) Cmsmadesimple Cms made simple 1.6.9 (not an official CPE) Cmsmadesimple Cms made simple 1.6.10 (not an official CPE) CMS Made Simple 1.7 CMS Made Simple 1.7.1 CMS Made Simple 1.8 CMS Made Simple 1.8.1 CMS Made Simple 1.8.2 CMS Made Simple 1.9 CMS Made Simple 1.9.1 CMS Made Simple 1.9.2 CMS Made Simple 1.9.3 CMS Made Simple 1.9.4 CMS Made Simple 1.9.4.1 CMS Made Simple 1.9.4.2 CMS Made Simple 1.9.4.3 CMS Made Simple 1.10 CMS Made Simple 1.10.1 CMS Made Simple 1.10.2 CMS Made Simple 1.10.3 CMS Made Simple 1.11 CMS Made Simple 1.11.1 CMS Made Simple 1.11.2 CMS Made Simple 1.11.2.1 CMS Made Simple 1.11.3 CMS Made Simple 1.11.4 CMS Made Simple 1.11.5 CMS Made Simple 1.11.6 CMS Made Simple 1.11.7 CMS Made Simple 1.11.8 CMS Made Simple 1.11.9 CMS Made Simple 1.11.10 Cmsmadesimple Cms made simple 1.11.11 (not an official CPE) Cmsmadesimple Cms made simple 1.11.12 (not an official CPE) Cmsmadesimple Cms made simple 1.11.13 (not an official CPE) Cmsmadesimple Cms made simple 1.12 (not an official CPE) Cmsmadesimple Cms made simple 1.12.1 (not an official CPE) CMSimple CMSimple 2.0 Beta 1 CMSimple CMSimple 2.0 Beta 2 CMSimple CMSimple 2.0 Beta 3 CMSimple CMSimple 2.0 Beta 4 Cmsmadesimple Cms made simple 2.0.1 (not an official CPE) Cmsmadesimple Cms made simple 2.0.1.1 (not an official CPE) CMSimple CMSimple 2.1 Cmsmadesimple Cms made simple 2.1.1 (not an official CPE) Cmsmadesimple Cms made simple 2.1.2 (not an official CPE) CMSimple CMSimple 2.2 CMSimple CMSimple 2.2 Beta 1 CMSimple CMSimple 2.2 Beta 2 CMSimple CMSimple 2.2 Beta 3 CMSimple CMSimple 2.2 Beta 4 Cmsmadesimple Cms made simple 2.2.6 (not an official CPE)