CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors.
References
Configurations
Information
Published : 2007-10-14 11:17
Updated : 2018-10-15 14:44
NVD link : CVE-2007-5442
Mitre link : CVE-2007-5442
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
cmsmadesimple
- cms_made_simple