Vulnerabilities > CVE-2019-9058 - Unspecified vulnerability in Cmsmadesimple CMS Made Simple

047910
CVSS 7.2 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
cmsmadesimple

Summary

An issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted value in the sel_groups parameter that leads to authenticated object injection.

Vulnerable Configurations

Part Description Count
Application
Cmsmadesimple
145