CVE-2005-2846
CMS Made Simple <0.10 - RCE
Title source: llmDescription
PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nls[file][vx][vxsfx] parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by groszynskif · htmlwebappsphp
https://www.exploit-db.com/exploits/26217
Scores
EPSS
0.0243
EPSS Percentile
85.2%
Details
Status
published
Products (1)
cmsmadesimple/cms_made_simple
0.10
Published
Sep 08, 2005
Tracked Since
Feb 18, 2026