CVE-2005-2846: High severity CMSmadesimple CMS Made Simple vulnerability
Published Sep 8, 2005
·Updated
PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nls[file][vx][vxsfx] parameter.
Affected Software
1 affected component
CMSmadesimple CMS Made Simple=0.10
Remediation
Patch Available
Patch Available
Event History
Sep 8, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2846?
CVE-2005-2846 is classified as a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2005-2846?
To fix CVE-2005-2846, upgrade CMS Made Simple to a version higher than 0.10 where the vulnerability is patched.
3
What software is affected by CVE-2005-2846?
CVE-2005-2846 affects CMS Made Simple version 0.10 and earlier.
4
What kind of attacks can CVE-2005-2846 facilitate?
CVE-2005-2846 can facilitate remote file inclusion attacks that lead to the execution of arbitrary PHP code.
5
Are there any exploits available for CVE-2005-2846?
Yes, there have been reported exploits for CVE-2005-2846 that target the vulnerable parameter in the lang.php file.