CVE-2007-5441 in CMS Made Simple

Resumen (Inglés)

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by (1) adding a user via a direct request to admin/adduser.php and (2) reading the admin log via an "admin/adminlog.php?page=1" request.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2007-10-14

Divulgación

2007-10-14

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
39251	CMS Made Simple Administrative escalada de privilegios	264	No está definido	No está definido	CVE-2007-5441

Fuentes

• MITRE
• NVD
• CVE Details