Vulnerabilities > CVE-2007-2473 - SQL Injection vulnerability in CMS Made Simple Stylesheet.PHP

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

cmsmadesimple

exploit available

NVD

Published: 2007-05-02

Updated: 2017-07-29

Summary

SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter. The vendor has addressed this issue with the following product update: http://dev.cmsmadesimple.org/frs/?group_id=6

Vulnerable Configurations

Part	Description	Count
Application	Cmsmadesimple Cmsmadesimple CMS Made Simple - Cmsmadesimple CMS Made Simple 0.1 Cmsmadesimple CMS Made Simple 0.2 Cmsmadesimple CMS Made Simple 0.2.1 Cmsmadesimple CMS Made Simple 0.3 Cmsmadesimple CMS Made Simple 0.3.1 Cmsmadesimple CMS Made Simple 0.3.2 Cmsmadesimple CMS Made Simple 0.4 Cmsmadesimple CMS Made Simple 0.4.1 Cmsmadesimple CMS Made Simple 0.5 Cmsmadesimple CMS Made Simple 0.5.1 Cmsmadesimple CMS Made Simple 0.6 Cmsmadesimple CMS Made Simple 0.6.1 Cmsmadesimple CMS Made Simple 0.6.2 Cmsmadesimple CMS Made Simple 0.6.3 Cmsmadesimple CMS Made Simple 0.7 Cmsmadesimple CMS Made Simple 0.7.1 Cmsmadesimple CMS Made Simple 0.7.2 Cmsmadesimple CMS Made Simple 0.7.3 Cmsmadesimple CMS Made Simple 0.8 Cmsmadesimple CMS Made Simple 0.8.1 Cmsmadesimple CMS Made Simple 0.8.2 Cmsmadesimple CMS Made Simple 0.9 Cmsmadesimple CMS Made Simple 0.9.1 Cmsmadesimple CMS Made Simple 0.9.2 Cmsmadesimple CMS Made Simple 0.10 Cmsmadesimple CMS Made Simple 0.10.1 Cmsmadesimple CMS Made Simple 0.10.2 Cmsmadesimple CMS Made Simple 0.10.3 Cmsmadesimple CMS Made Simple 0.10.4 Cmsmadesimple CMS Made Simple 0.11 Cmsmadesimple CMS Made Simple 0.11.1 Cmsmadesimple CMS Made Simple 0.11.2 Cmsmadesimple CMS Made Simple 0.12 Cmsmadesimple CMS Made Simple 0.12.1 Cmsmadesimple CMS Made Simple 0.12.2 Cmsmadesimple CMS Made Simple 0.13 Cmsmadesimple CMS Made Simple 1.0 Cmsmadesimple CMS Made Simple 1.0.1 Cmsmadesimple CMS Made Simple 1.0.2 Cmsmadesimple CMS Made Simple 1.0.3 Cmsmadesimple CMS Made Simple 1.0.4 Cmsmadesimple CMS Made Simple 1.0.5	43

Exploit-Db

description	CMS Made Simple 105 Stylesheet.PHP SQL Injection Vulnerability. CVE-2007-2473. Webapps exploit for php platform
id	EDB-ID:29941
last seen	2016-02-03
modified	2007-05-02
published	2007-05-02
reporter	Daniel Lucq
source	https://www.exploit-db.com/download/29941/
title	CMS Made Simple 105 Stylesheet.PHP SQL Injection Vulnerability

Summary

Vulnerable Configurations

Exploit-Db

References