CMS Made Simple CVE-2010-3882 Cross-Site Scripting Vulnerability

Bugtraq ID:	73523
Class:	Input Validation Error
CVE:	CVE-2010-3882
Remote:	Yes
Local:	No
Published:	Oct 08 2010 12:00AM
Updated:	Oct 08 2010 12:00AM
Credit:	Unknown
Vulnerable:	CMS Made Simple CMS Made Simple 1.7.1 CMS Made Simple CMS Made Simple 1.6.8 CMS Made Simple CMS Made Simple 1.6.7 CMS Made Simple CMS Made Simple 1.6.6 CMS Made Simple CMS Made Simple 1.6.4 CMS Made Simple CMS Made Simple 1.6.3 CMS Made Simple CMS Made Simple 1.6.2 CMS Made Simple CMS Made Simple 1.6.1 CMS Made Simple CMS Made Simple 1.5.4 CMS Made Simple CMS Made Simple 1.5.2 CMS Made Simple CMS Made Simple 1.5.1 CMS Made Simple CMS Made Simple 1.4.1 CMS Made Simple CMS Made Simple 1.2.5 CMS Made Simple CMS Made Simple 1.2.4 CMS Made Simple CMS Made Simple 1.2.3 CMS Made Simple CMS Made Simple 1.2.2 CMS Made Simple CMS Made Simple 1.1.2 CMS Made Simple CMS Made Simple 1.1.1 CMS Made Simple CMS Made Simple 1.0.8 CMS Made Simple CMS Made Simple 1.0.7 CMS Made Simple CMS Made Simple 1.0.4 CMS Made Simple CMS Made Simple 1.0.3 CMS Made Simple CMS Made Simple 1.0.2 CMS Made Simple CMS Made Simple 1.0.1 CMS Made Simple CMS Made Simple 0.12.2 CMS Made Simple CMS Made Simple 0.12.1 CMS Made Simple CMS Made Simple 0.11.2 CMS Made Simple CMS Made Simple 0.11.1 CMS Made Simple CMS Made Simple 0.10.4 CMS Made Simple CMS Made Simple 0.10.3 CMS Made Simple CMS Made Simple 1.7 CMS Made Simple CMS Made Simple 1.6.5 CMS Made Simple CMS Made Simple 1.6 CMS Made Simple CMS Made Simple 1.5.3 CMS Made Simple CMS Made Simple 1.5 Beta1 CMS Made Simple CMS Made Simple 1.5 CMS Made Simple CMS Made Simple 1.4 Beta2 CMS Made Simple CMS Made Simple 1.4 Beta1 CMS Made Simple CMS Made Simple 1.4 CMS Made Simple CMS Made Simple 1.3.1 CMS Made Simple CMS Made Simple 1.3 CMS Made Simple CMS Made Simple 1.2.1 CMS Made Simple CMS Made Simple 1.2 RC1 CMS Made Simple CMS Made Simple 1.2 Beta3 CMS Made Simple CMS Made Simple 1.2 Beta2 CMS Made Simple CMS Made Simple 1.2 Beta1 CMS Made Simple CMS Made Simple 1.1.4.1 CMS Made Simple CMS Made Simple 1.1.3.1 CMS Made Simple CMS Made Simple 1.1 RC3 CMS Made Simple CMS Made Simple 1.1 RC2 CMS Made Simple CMS Made Simple 1.1 RC1 CMS Made Simple CMS Made Simple 1.05 CMS Made Simple CMS Made Simple 1.0.6 CMS Made Simple CMS Made Simple 1.0 Beta6 CMS Made Simple CMS Made Simple 1.0 Beta5 CMS Made Simple CMS Made Simple 1.0 Beta4 CMS Made Simple CMS Made Simple 1.0 Beta3 CMS Made Simple CMS Made Simple 1.0 Beta2 CMS Made Simple CMS Made Simple 1.0 Beta1 CMS Made Simple CMS Made Simple 0.13 Beta3 CMS Made Simple CMS Made Simple 0.13 Beta2 CMS Made Simple CMS Made Simple 0.13 Beta1 CMS Made Simple CMS Made Simple 0.12 Beta2 CMS Made Simple CMS Made Simple 0.12 Beta1 CMS Made Simple CMS Made Simple 0.12 CMS Made Simple CMS Made Simple 0.11 Beta6 CMS Made Simple CMS Made Simple 0.11 Beta5 CMS Made Simple CMS Made Simple 0.11 CMS Made Simple CMS Made Simple 0.10
Not Vulnerable:

CMS Made Simple CVE-2010-3882 Cross-Site Scripting Vulnerability

CMS Made Simple is prone to a cross-site scripting vulnerability. Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.7.1 and earlier allow remote attackers to inject arbitrary web script or HTML via input to the (1) Add Pages, (2) Add Global Content, (3) Edit Global Content, (4) Add Article, (5) Add Category, (6) Add Field Definition, or (7) Add Shortcut module.

CMS Made Simple CVE-2010-3882 Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

CMS Made Simple CVE-2010-3882 Cross-Site Scripting Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]

CMS Made Simple CVE-2010-3882 Cross-Site Scripting Vulnerability

References:

• http://security.bkis.com/multiple-vulnerabilities-in-cms-made-simple/ (MISC)