CVEvulnerability
CVE-2007-5442
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2007-10-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors.
Affected configurations
• cmsmadesimple cms made simple 1.1.3.1
Related
Weakness · not in database (1)
References
- http://securityreason.com/securityalert/3223 securityreason.com
- http://www.securityfocus.com/archive/1/481984/100/0/threaded www.securityfocus.com
- http://securityreason.com/securityalert/3223 securityreason.com
- http://www.securityfocus.com/archive/1/481984/100/0/threaded www.securityfocus.com