CVE-2005-2846

CMS Made Simple <= 0.10 - Remote File Inclusion via lang.php nls Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-2846. PoCs published by groszynskif.

AI-analyzed exploit summary This exploit demonstrates a remote file inclusion vulnerability in CMS Made Simple by manipulating the `nls[file][vx][vxsfx]` parameter to include arbitrary remote PHP code. The attacker can execute code with the privileges of the web server process.

Description

PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nls[file][vx][vxsfx] parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by groszynskif · htmlwebappsphp
https://www.exploit-db.com/exploits/26217

This exploit demonstrates a remote file inclusion vulnerability in CMS Made Simple by manipulating the `nls[file][vx][vxsfx]` parameter to include arbitrary remote PHP code. The attacker can execute code with the privileges of the web server process.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: CMS Made Simple <= 0.10
No auth needed
Prerequisites: Remote PHP file hosting · Web server with vulnerable CMS Made Simple installation
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=112552342004406&w=2
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16654/
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/14709

Scores

EPSS 0.0681
EPSS Percentile 93.2%

Details

Status published
Products (1)
cmsmadesimple/cms_made_simple 0.10
Published Sep 08, 2005
Tracked Since Feb 18, 2026