Vulnerabilities > CVE-2024-0523 - Unspecified vulnerability in Cmseasy

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

cmseasy

critical

NVD

Published: 2024-01-14

Updated: 2024-11-21

Summary

A vulnerability was found in CmsEasy up to 7.7.7. It has been declared as critical. Affected by this vulnerability is the function getslide_child_action in the library lib/admin/language_admin.php. The manipulation of the argument sid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250693 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerable Configurations

Part	Description	Count
Application	Cmseasy Cmseasy Cmseasy 5.6 Cmseasy Cmseasy 5.7 Cmseasy Cmseasy 6.0 Cmseasy Cmseasy 6.1 Cmseasy Cmseasy 7.0 Cmseasy Cmseasy 7.1.3 Cmseasy Cmseasy 7.1.4 Cmseasy Cmseasy 7.1.5 Cmseasy Cmseasy 7.1.20190215 Cmseasy Cmseasy 7.2.4 Cmseasy Cmseasy 7.2.5 Cmseasy Cmseasy 7.2.6 Cmseasy Cmseasy 7.2.7 Cmseasy Cmseasy 7.3.0 Cmseasy Cmseasy 7.3.1 Cmseasy Cmseasy 7.3.2 Cmseasy Cmseasy 7.3.3 Cmseasy Cmseasy 7.3.4 Cmseasy Cmseasy 7.3.5 Cmseasy Cmseasy 7.3.6 Cmseasy Cmseasy 7.3.7 Cmseasy Cmseasy 7.3.8 Cmseasy Cmseasy 7.5.0 Cmseasy Cmseasy 7.5.1 Cmseasy Cmseasy 7.5.2 Cmseasy Cmseasy 7.5.3 Cmseasy Cmseasy 7.5.4 Cmseasy Cmseasy 7.5.5 Cmseasy Cmseasy 7.5.6 Cmseasy Cmseasy 7.5.7 Cmseasy Cmseasy 7.5.8 Cmseasy Cmseasy 7.5.9 Cmseasy Cmseasy 7.6.0 Cmseasy Cmseasy 7.6.1 Cmseasy Cmseasy 7.6.2 Cmseasy Cmseasy 7.6.3 Cmseasy Cmseasy 7.6.3.1 Cmseasy Cmseasy 7.6.3.2 Cmseasy Cmseasy 7.6.4 Cmseasy Cmseasy 7.6.5 Cmseasy Cmseasy 7.6.6 Cmseasy Cmseasy 7.6.7 Cmseasy Cmseasy 7.6.8 Cmseasy Cmseasy 7.6.9 Cmseasy Cmseasy 7.6.9.1 Cmseasy Cmseasy 7.6.9.2 Cmseasy Cmseasy 7.6.9.3 Cmseasy Cmseasy 7.7.0 Cmseasy Cmseasy 7.7.0.1 Cmseasy Cmseasy 7.7.1 Cmseasy Cmseasy 7.7.2.1 Cmseasy Cmseasy 7.7.2.2 Cmseasy Cmseasy 7.7.2.3 Cmseasy Cmseasy 7.7.2.5 Cmseasy Cmseasy 7.7.2.6 Cmseasy Cmseasy 7.7.2.7 Cmseasy Cmseasy 7.7.2.8 Cmseasy Cmseasy 7.7.2.9 Cmseasy Cmseasy 7.7.3.0 Cmseasy Cmseasy 7.7.3.1 Cmseasy Cmseasy 7.7.3.2 Cmseasy Cmseasy 7.7.3.3 Cmseasy Cmseasy 7.7.3.4 Cmseasy Cmseasy 7.7.3.5 Cmseasy Cmseasy 7.7.3.8 Cmseasy Cmseasy 7.7.4.0 Cmseasy Cmseasy 7.7.4.1 Cmseasy Cmseasy 7.7.4.2 Cmseasy Cmseasy 7.7.4.3 Cmseasy Cmseasy 7.7.4.4 Cmseasy Cmseasy 7.7.4.5 Cmseasy Cmseasy 7.7.4.6 Cmseasy Cmseasy 7.7.4.7 Cmseasy Cmseasy 7.7.4.9 Cmseasy Cmseasy 7.7.5.0 Cmseasy Cmseasy 7.7.5.1 Cmseasy Cmseasy 7.7.5.2 Cmseasy Cmseasy 7.7.5.3 Cmseasy Cmseasy 7.7.5.4 Cmseasy Cmseasy 7.7.5.5 Cmseasy Cmseasy 7.7.5.6 Cmseasy Cmseasy 7.7.5.7 Cmseasy Cmseasy 7.7.5.8 Cmseasy Cmseasy 7.7.5.9 Cmseasy Cmseasy 7.7.5_20211012 Cmseasy Cmseasy 7.7.6.0 Cmseasy Cmseasy 7.7.6.1 Cmseasy Cmseasy 7.7.6.2 Cmseasy Cmseasy 7.7.6.3 Cmseasy Cmseasy 7.7.6.4 Cmseasy Cmseasy 7.7.6.5 Cmseasy Cmseasy 7.7.6.6 Cmseasy Cmseasy 7.7.6.7 Cmseasy Cmseasy 7.7.6.8 Cmseasy Cmseasy 7.7.6.9 Cmseasy Cmseasy 7.7.7.0	101

Summary

Vulnerable Configurations

References