QwikSec

Security Database

CVE

CWE

Training

CVE-2012-5450

Published: Dec 3, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) 1.11.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that delete arbitrary files via the deld parameter.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://packetstormsecurity.org/files/117951/CMS-Made-Simple-1.11.2-Cross-Site-Request-Forgery.html

x_refsource_MISC

https://www.htbridge.com/advisory/HTB23121

x_refsource_MISC

third-party-advisory

x_refsource_SECUNIA

http://forum.cmsmadesimple.org/viewtopic.php?f=1&t=63545

x_refsource_CONFIRM

cmsmadesimple-images-csrf(79881)

vdb-entry

x_refsource_XF

http://viewsvn.cmsmadesimple.org/diff.php?repname=cmsmadesimple&path=%2Ftrunk%2Flib%2Ffilemanager%2FImageManager%2FClasses%2FImageManager.php&rev=8400&peg=8498

x_refsource_CONFIRM

20121107 Cross-Site Request Forgery (CSRF) in CMS Made Simple

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.