Cross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) 1.11.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deld parameter.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:44
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2012-11/0035.html - Exploit | |
References | () http://forum.cmsmadesimple.org/viewtopic.php?f=1&t=63545 - | |
References | () http://packetstormsecurity.org/files/117951/CMS-Made-Simple-1.11.2-Cross-Site-Request-Forgery.html - Exploit | |
References | () http://secunia.com/advisories/51185 - Vendor Advisory | |
References | () http://viewsvn.cmsmadesimple.org/diff.php?repname=cmsmadesimple&path=%2Ftrunk%2Flib%2Ffilemanager%2FImageManager%2FClasses%2FImageManager.php&rev=8400&peg=8498 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/79881 - | |
References | () https://www.htbridge.com/advisory/HTB23121 - Exploit |
Information
Published : 2012-12-03 21:55
Updated : 2024-11-21 01:44
NVD link : CVE-2012-5450
Mitre link : CVE-2012-5450
CVE.ORG link : CVE-2012-5450
JSON object : View
Products Affected
cmsmadesimple
- cms_made_simple
CWE
CWE-352
Cross-Site Request Forgery (CSRF)