CVEvulnerability
CVE-2012-5450
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-12-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) 1.11.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deld parameter.
Affected configurations
• cmsmadesimple cms made simple (<= 1.11.2)
• cmsmadesimple cms made simple 0.1
• cmsmadesimple cms made simple 0.2
• cmsmadesimple cms made simple 0.2.1
• cmsmadesimple cms made simple 0.3
• cmsmadesimple cms made simple 0.3.1
• cmsmadesimple cms made simple 0.3.2
• cmsmadesimple cms made simple 0.4
• cmsmadesimple cms made simple 0.4.1
• cmsmadesimple cms made simple 0.5
• cmsmadesimple cms made simple 0.5.1
• cmsmadesimple cms made simple 0.6
• cmsmadesimple cms made simple 0.6.1
• cmsmadesimple cms made simple 0.6.2
• cmsmadesimple cms made simple 0.6.3
• cmsmadesimple cms made simple 0.7
• cmsmadesimple cms made simple 0.7.1
• cmsmadesimple cms made simple 0.7.2
• cmsmadesimple cms made simple 0.7.3
• cmsmadesimple cms made simple 0.8
• cmsmadesimple cms made simple 0.8.1
• cmsmadesimple cms made simple 0.8.2
• cmsmadesimple cms made simple 0.9
• cmsmadesimple cms made simple 0.9.1
• cmsmadesimple cms made simple 0.9.2
• cmsmadesimple cms made simple 0.10
• cmsmadesimple cms made simple 0.10.1
• cmsmadesimple cms made simple 0.10.2
• cmsmadesimple cms made simple 0.10.3
• cmsmadesimple cms made simple 0.10.4
• cmsmadesimple cms made simple 0.11
• cmsmadesimple cms made simple 0.11.1
• cmsmadesimple cms made simple 0.11.2
• cmsmadesimple cms made simple 0.12
• cmsmadesimple cms made simple 0.12.1
• cmsmadesimple cms made simple 0.12.2
• cmsmadesimple cms made simple 0.13
• cmsmadesimple cms made simple 1.0
• cmsmadesimple cms made simple 1.0.1
• cmsmadesimple cms made simple 1.0.2
• cmsmadesimple cms made simple 1.0.3
• cmsmadesimple cms made simple 1.0.4
• cmsmadesimple cms made simple 1.0.5
• cmsmadesimple cms made simple 1.0.6
• cmsmadesimple cms made simple 1.1
• cmsmadesimple cms made simple 1.1.1
• cmsmadesimple cms made simple 1.1.2
• cmsmadesimple cms made simple 1.1.3
• cmsmadesimple cms made simple 1.1.3.1
• cmsmadesimple cms made simple 1.1.4
• cmsmadesimple cms made simple 1.2
• cmsmadesimple cms made simple 1.2.1
• cmsmadesimple cms made simple 1.2.2
• cmsmadesimple cms made simple 1.2.3
• cmsmadesimple cms made simple 1.2.4
• cmsmadesimple cms made simple 1.2.5
• cmsmadesimple cms made simple 1.3
• cmsmadesimple cms made simple 1.4
• cmsmadesimple cms made simple 1.4.1
• cmsmadesimple cms made simple 1.5
… and 24 more
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0035.html Exploit
- http://forum.cmsmadesimple.org/viewtopic.php?f=1&t=63545 forum.cmsmadesimple.org
- http://packetstormsecurity.org/files/117951/CMS-Made-Simple-1.11.2-Cross-Site-Request-Forgery.html Exploit
- http://secunia.com/advisories/51185 Vendor Advisory
- http://viewsvn.cmsmadesimple.org/diff.php?repname=cmsmadesimple&path=%2Ftrunk%2Flib%2Ffilemanager%2FImageManager%2FClasses%2FImageManager.php&rev=8400&peg=8498 viewsvn.cmsmadesimple.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79881 exchange.xforce.ibmcloud.com
- https://www.htbridge.com/advisory/HTB23121 Exploit
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0035.html Exploit
- http://forum.cmsmadesimple.org/viewtopic.php?f=1&t=63545 forum.cmsmadesimple.org
- http://packetstormsecurity.org/files/117951/CMS-Made-Simple-1.11.2-Cross-Site-Request-Forgery.html Exploit
- http://secunia.com/advisories/51185 Vendor Advisory
- http://viewsvn.cmsmadesimple.org/diff.php?repname=cmsmadesimple&path=%2Ftrunk%2Flib%2Ffilemanager%2FImageManager%2FClasses%2FImageManager.php&rev=8400&peg=8498 viewsvn.cmsmadesimple.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79881 exchange.xforce.ibmcloud.com
- https://www.htbridge.com/advisory/HTB23121 Exploit