Read the docs

CMS Made Simple

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

CMS Made Simple records in CISA KEV

No CMS Made Simple vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Cms Made Simple · all components

Priority MEDIUM 41

Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in (…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04808 Published 2008-05-16 No fix listed CWE-20
Open these records in search →