cmsmadesimple version 2.2.7 contains a Incorrect Access Control vulnerability in the function of send_recovery_email in the line "$url = $config['admin_url'] . '/login.php?recoverme=' . $code;" that can result in Administrator Password Reset Poisoning, specifically a reset URL pointing at an attacker controlled server can be created by using a host header attack.
References
Link | Resource |
---|---|
http://dev.cmsmadesimple.org/bug/view/11762 | Exploit Third Party Advisory |
http://dev.cmsmadesimple.org/bug/view/11762 | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 03:39
Type | Values Removed | Values Added |
---|---|---|
References | () http://dev.cmsmadesimple.org/bug/view/11762 - Exploit, Third Party Advisory |
Information
Published : 2018-04-18 19:29
Updated : 2024-11-21 03:39
NVD link : CVE-2018-1000158
Mitre link : CVE-2018-1000158
CVE.ORG link : CVE-2018-1000158
JSON object : View
Products Affected
cmsmadesimple
- cms_made_simple
CWE
CWE-732
Incorrect Permission Assignment for Critical Resource