CVE-2007-5441 in CMS Made Simple
Summary
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by (1) adding a user via a direct request to admin/adduser.php and (2) reading the admin log via an "admin/adminlog.php?page=1" request.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
10/14/2007
Disclosure
10/14/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 39251 | CMS Made Simple Administrative access control | 264 | Not defined | Not defined | CVE-2007-5441 |