CVE-2007-5441

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some…

published October 14, 2007

CVSS
—
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by (1) adding a user via a direct request to admin/adduser.php and (2) reading the admin log via an "admin/adminlog.php?page=1" request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01108 · 65.4th percentile
Published
2007-10-14T18:00Z
EPSS history
Timeline
  • 14 OCT 18:00Z
    CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some…
    cvelistv5