Description
SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Daniel Lucq · textwebappsphp
https://www.exploit-db.com/exploits/29941
References (7)
Core 7
Core References
Patch x_refsource_confirm
http://blog.cmsmadesimple.org/2007/04/24/cms-made-simple-106-released/
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/25082
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34044
Exploit, Vendor Advisory x_refsource_misc
http://www.scanit.be/advisory-2007-05-02.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1628
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/23753
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/35744
Scores
EPSS
0.0082
EPSS Percentile
74.6%
Details
Status
published
Products (1)
cmsmadesimple/cms_made_simple
< 1.0.5
Published
May 02, 2007
Tracked Since
Feb 18, 2026