CVEvulnerability
CVE-2007-5441
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-10-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by (1) adding a user via a direct request to admin/adduser.php and (2) reading the admin log via an "admin/adminlog.php?page=1" request.
Affected configurations
• cmsmadesimple cms made simple 1.1.3.1
Related
Weakness · not in database (1)
References
- http://blog.cmsmadesimple.org/2007/10/07/announcing-cms-made-simple-1141/ blog.cmsmadesimple.org
- http://osvdb.org/45481 osvdb.org
- http://securityreason.com/securityalert/3223 securityreason.com
- http://www.securityfocus.com/archive/1/481984/100/0/threaded www.securityfocus.com
- http://blog.cmsmadesimple.org/2007/10/07/announcing-cms-made-simple-1141/ blog.cmsmadesimple.org
- http://osvdb.org/45481 osvdb.org
- http://securityreason.com/securityalert/3223 securityreason.com
- http://www.securityfocus.com/archive/1/481984/100/0/threaded www.securityfocus.com