CMS Made Simple Remote Database Corruption Vulnerability

Bugtraq ID:	50659
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 13 2011 12:00AM
Updated:	Nov 13 2011 12:00AM
Credit:	Robert Campbell
Vulnerable:	CMS Made Simple CMS Made Simple 1.9.4 1 CMS Made Simple CMS Made Simple 1.9.4 CMS Made Simple CMS Made Simple 1.9.3 CMS Made Simple CMS Made Simple 1.9.2 CMS Made Simple CMS Made Simple 1.8.3 CMS Made Simple CMS Made Simple 1.7.1 CMS Made Simple CMS Made Simple 1.7.1 CMS Made Simple CMS Made Simple 1.7 CMS Made Simple CMS Made Simple 1.6.7 CMS Made Simple CMS Made Simple 1.6.6 CMS Made Simple CMS Made Simple 1.6.4 CMS Made Simple CMS Made Simple 1.6.3 CMS Made Simple CMS Made Simple 1.6.2 CMS Made Simple CMS Made Simple 1.6.2 CMS Made Simple CMS Made Simple 1.6.1 CMS Made Simple CMS Made Simple 1.5.4 CMS Made Simple CMS Made Simple 1.5.2 CMS Made Simple CMS Made Simple 1.5.1 CMS Made Simple CMS Made Simple 1.4.1 CMS Made Simple CMS Made Simple 1.2.5 CMS Made Simple CMS Made Simple 1.2.4 CMS Made Simple CMS Made Simple 1.2.3 CMS Made Simple CMS Made Simple 1.2.2 CMS Made Simple CMS Made Simple 1.1.2 CMS Made Simple CMS Made Simple 1.1.1 CMS Made Simple CMS Made Simple 1.0.4 CMS Made Simple CMS Made Simple 1.0.3 CMS Made Simple CMS Made Simple 1.0.2 CMS Made Simple CMS Made Simple 1.0.1 CMS Made Simple CMS Made Simple 0.12.2 CMS Made Simple CMS Made Simple 0.12.1 CMS Made Simple CMS Made Simple 0.11.2 CMS Made Simple CMS Made Simple 0.11.1 CMS Made Simple CMS Made Simple 0.10.4 CMS Made Simple CMS Made Simple 0.10.3 CMS Made Simple CMS Made Simple 0.10.2 CMS Made Simple CMS Made Simple 0.10.1 CMS Made Simple CMS Made Simple 0.9.2 CMS Made Simple CMS Made Simple 0.9.1 CMS Made Simple CMS Made Simple 0.9 CMS Made Simple CMS Made Simple 0.8.2 CMS Made Simple CMS Made Simple 0.8.1 CMS Made Simple CMS Made Simple 0.7.3 CMS Made Simple CMS Made Simple 0.7.2 CMS Made Simple CMS Made Simple 0.7.1 CMS Made Simple CMS Made Simple 0.6.2 CMS Made Simple CMS Made Simple 0.6.1 CMS Made Simple CMS Made Simple 0.5.1 CMS Made Simple CMS Made Simple 0.3.2 CMS Made Simple CMS Made Simple 0.3.1 CMS Made Simple CMS Made Simple 0.2.1 CMS Made Simple CMS Made Simple 1.9.4.2 CMS Made Simple CMS Made Simple 1.9.1 CMS Made Simple CMS Made Simple 1.9.0 CMS Made Simple CMS Made Simple 1.9 CMS Made Simple CMS Made Simple 1.8.1 CMS Made Simple CMS Made Simple 1.8 CMS Made Simple CMS Made Simple 1.7 CMS Made Simple CMS Made Simple 1.6.5 CMS Made Simple CMS Made Simple 1.6 CMS Made Simple CMS Made Simple 1.5.3 CMS Made Simple CMS Made Simple 1.5 CMS Made Simple CMS Made Simple 1.4 CMS Made Simple CMS Made Simple 1.3 CMS Made Simple CMS Made Simple 1.2.1 CMS Made Simple CMS Made Simple 1.1.4.1 CMS Made Simple CMS Made Simple 1.1.4 CMS Made Simple CMS Made Simple 1.1.3.1 CMS Made Simple CMS Made Simple 1.1.3 CMS Made Simple CMS Made Simple 1.06 CMS Made Simple CMS Made Simple 1.05 CMS Made Simple CMS Made Simple 1.0.6 CMS Made Simple CMS Made Simple 0.9 CMS Made Simple CMS Made Simple 0.8 CMS Made Simple CMS Made Simple 0.7 CMS Made Simple CMS Made Simple 0.6.3 CMS Made Simple CMS Made Simple 0.6 CMS Made Simple CMS Made Simple 0.5 CMS Made Simple CMS Made Simple 0.4.1 CMS Made Simple CMS Made Simple 0.4 CMS Made Simple CMS Made Simple 0.3 CMS Made Simple CMS Made Simple 0.2 CMS Made Simple CMS Made Simple 0.13 CMS Made Simple CMS Made Simple 0.12 CMS Made Simple CMS Made Simple 0.11 CMS Made Simple CMS Made Simple 0.10 CMS Made Simple CMS Made Simple 0.1
Not Vulnerable:	CMS Made Simple CMS Made Simple 1.9.4.3

CMS Made Simple Remote Database Corruption Vulnerability

CMS Made Simple is prone to a vulnerability that could result in the corruption of the database.

An attacker can exploit this vulnerability to corrupt the database.

Versions prior to CMS Made Simple 1.9.4.3 are vulnerable.

CMS Made Simple Remote Database Corruption Vulnerability

Attackers can use a browser to exploit this issue.

CMS Made Simple Remote Database Corruption Vulnerability

Solution:
Updates are available. Please see the references for more details.

CMS Made Simple Remote Database Corruption Vulnerability

References:

• Announcing CMSMS 1.9.4.3 - Security Release (CMS Made Simple)
  
• CMS Made Simple Homepage (CMS Made Simple)