CVEvulnerability
CVE-2010-3883
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-10-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make permission modifications.
Affected configurations
• cmsmadesimple cms made simple (<= 1.7.1)
• cmsmadesimple cms made simple 0.10
• cmsmadesimple cms made simple 0.10.3
• cmsmadesimple cms made simple 0.10.4
• cmsmadesimple cms made simple 0.11
• cmsmadesimple cms made simple 0.11.1
• cmsmadesimple cms made simple 0.11.2
• cmsmadesimple cms made simple 0.12
• cmsmadesimple cms made simple 0.12.1
• cmsmadesimple cms made simple 0.12.2
• cmsmadesimple cms made simple 0.13
• cmsmadesimple cms made simple 1.0
• cmsmadesimple cms made simple 1.0.1
• cmsmadesimple cms made simple 1.0.2
• cmsmadesimple cms made simple 1.0.3
• cmsmadesimple cms made simple 1.0.4
• cmsmadesimple cms made simple 1.0.5
• cmsmadesimple cms made simple 1.0.6
• cmsmadesimple cms made simple 1.0.7
• cmsmadesimple cms made simple 1.0.8
• cmsmadesimple cms made simple 1.1
• cmsmadesimple cms made simple 1.1.1
• cmsmadesimple cms made simple 1.1.2
• cmsmadesimple cms made simple 1.1.3.1
• cmsmadesimple cms made simple 1.1.4.1
• cmsmadesimple cms made simple 1.2
• cmsmadesimple cms made simple 1.2.1
• cmsmadesimple cms made simple 1.2.2
• cmsmadesimple cms made simple 1.2.3
• cmsmadesimple cms made simple 1.2.4
• cmsmadesimple cms made simple 1.2.5
• cmsmadesimple cms made simple 1.3
• cmsmadesimple cms made simple 1.3.1
• cmsmadesimple cms made simple 1.4
• cmsmadesimple cms made simple 1.4.1
• cmsmadesimple cms made simple 1.5
• cmsmadesimple cms made simple 1.5.1
• cmsmadesimple cms made simple 1.5.2
• cmsmadesimple cms made simple 1.5.3
• cmsmadesimple cms made simple 1.5.4
• cmsmadesimple cms made simple 1.6
• cmsmadesimple cms made simple 1.6.1
• cmsmadesimple cms made simple 1.6.2
• cmsmadesimple cms made simple 1.6.3
• cmsmadesimple cms made simple 1.6.4
• cmsmadesimple cms made simple 1.6.5
• cmsmadesimple cms made simple 1.6.6
• cmsmadesimple cms made simple 1.6.7
• cmsmadesimple cms made simple 1.6.8
• cmsmadesimple cms made simple 1.7
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://secunia.com/advisories/40031 Vendor Advisory
- http://security.bkis.com/multiple-vulnerabilities-in-cms-made-simple/ security.bkis.com
- http://secunia.com/advisories/40031 Vendor Advisory
- http://security.bkis.com/multiple-vulnerabilities-in-cms-made-simple/ security.bkis.com