Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-2473. PoCs published by Daniel Lucq.
AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in CMS Made Simple 1.05, where the 'templateid' parameter in 'stylesheet.php' is not properly sanitized. Example URLs demonstrate boolean-based SQLi testing.
Description
SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Daniel Lucq · textwebappsphp
https://www.exploit-db.com/exploits/29941
The provided text describes an SQL injection vulnerability in CMS Made Simple 1.05, where the 'templateid' parameter in 'stylesheet.php' is not properly sanitized. Example URLs demonstrate boolean-based SQLi testing.
Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
CMS Made Simple 1.05
No auth needed
Prerequisites:
Access to the target URL
mistral-large-3 · analyzed Feb 16, 2026
Full analysis →
References (7)
Core 7
Core References
Patch x_refsource_confirm
http://blog.cmsmadesimple.org/2007/04/24/cms-made-simple-106-released/
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/25082
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34044
Exploit, Vendor Advisory x_refsource_misc
http://www.scanit.be/advisory-2007-05-02.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1628
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/23753
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/35744
Scores
EPSS
0.0380
EPSS Percentile
88.9%
Details
Status
published
Products (1)
cmsmadesimple/cms_made_simple
< 1.0.5
Published
May 02, 2007
Tracked Since
Feb 18, 2026