CVE-2010-1482: XSS
Published May 12, 2010
·Updated
Cross-site scripting (XSS) vulnerability in admin/editprefs.php in the backend in CMS Made Simple (CMSMS) before 1.7.1 might allow remote attackers to inject arbitrary web script or HTML via the dateformatstring parameter.
Affected Software
72 affected components
CMSmadesimple CMS Made Simple<=1.7
CMSmadesimple CMS Made Simple=0.10
CMSmadesimple CMS Made Simple=0.10.3
CMSmadesimple CMS Made Simple=0.10.4
CMSmadesimple CMS Made Simple=0.11
CMSmadesimple CMS Made Simple=0.11-beta5
CMSmadesimple CMS Made Simple=0.11-beta6
CMSmadesimple CMS Made Simple=0.11.1
CMSmadesimple CMS Made Simple=0.11.2
CMSmadesimple CMS Made Simple=0.12
CMSmadesimple CMS Made Simple=0.12-beta1
CMSmadesimple CMS Made Simple=0.12-beta2
CMSmadesimple CMS Made Simple=0.12.1
CMSmadesimple CMS Made Simple=0.12.2
CMSmadesimple CMS Made Simple=0.13-beta1
CMSmadesimple CMS Made Simple=0.13-beta2
CMSmadesimple CMS Made Simple=0.13-beta3
CMSmadesimple CMS Made Simple=1.0
CMSmadesimple CMS Made Simple=1.0-beta1
CMSmadesimple CMS Made Simple=1.0-beta2
CMSmadesimple CMS Made Simple=1.0-beta3
CMSmadesimple CMS Made Simple=1.0-beta4
CMSmadesimple CMS Made Simple=1.0-beta5
CMSmadesimple CMS Made Simple=1.0-beta6
CMSmadesimple CMS Made Simple=1.0.1
CMSmadesimple CMS Made Simple=1.0.2
CMSmadesimple CMS Made Simple=1.0.3
CMSmadesimple CMS Made Simple=1.0.4
CMSmadesimple CMS Made Simple=1.0.5
CMSmadesimple CMS Made Simple=1.0.6
CMSmadesimple CMS Made Simple=1.0.7
CMSmadesimple CMS Made Simple=1.0.8
CMSmadesimple CMS Made Simple=1.1
CMSmadesimple CMS Made Simple=1.1-rc1
CMSmadesimple CMS Made Simple=1.1-rc2
CMSmadesimple CMS Made Simple=1.1-rc3
CMSmadesimple CMS Made Simple=1.1.1
CMSmadesimple CMS Made Simple=1.1.2
CMSmadesimple CMS Made Simple=1.1.3.1
CMSmadesimple CMS Made Simple=1.1.4.1
CMSmadesimple CMS Made Simple=1.2
CMSmadesimple CMS Made Simple=1.2-beta1
CMSmadesimple CMS Made Simple=1.2-beta2
CMSmadesimple CMS Made Simple=1.2-beta3
CMSmadesimple CMS Made Simple=1.2-rc1
CMSmadesimple CMS Made Simple=1.2.1
CMSmadesimple CMS Made Simple=1.2.2
CMSmadesimple CMS Made Simple=1.2.3
CMSmadesimple CMS Made Simple=1.2.4
CMSmadesimple CMS Made Simple=1.2.5
CMSmadesimple CMS Made Simple=1.3
CMSmadesimple CMS Made Simple=1.3-beta1
CMSmadesimple CMS Made Simple=1.3-beta2
CMSmadesimple CMS Made Simple=1.3.1
CMSmadesimple CMS Made Simple=1.4
CMSmadesimple CMS Made Simple=1.4-beta1
CMSmadesimple CMS Made Simple=1.4-beta2
CMSmadesimple CMS Made Simple=1.4.1
CMSmadesimple CMS Made Simple=1.5
CMSmadesimple CMS Made Simple=1.5-beta1
CMSmadesimple CMS Made Simple=1.5.1
CMSmadesimple CMS Made Simple=1.5.2
CMSmadesimple CMS Made Simple=1.5.3
CMSmadesimple CMS Made Simple=1.5.4
CMSmadesimple CMS Made Simple=1.6
CMSmadesimple CMS Made Simple=1.6.1
CMSmadesimple CMS Made Simple=1.6.2
CMSmadesimple CMS Made Simple=1.6.3
CMSmadesimple CMS Made Simple=1.6.4
CMSmadesimple CMS Made Simple=1.6.5
CMSmadesimple CMS Made Simple=1.6.6
CMSmadesimple CMS Made Simple=1.6.7
Remediation
Patch Available
Event History
May 12, 2010
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·04:05 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1482?
The severity of CVE-2010-1482 is considered moderate as it allows remote attackers to inject arbitrary web script or HTML in specific scenarios.
2
How do I fix CVE-2010-1482?
To fix CVE-2010-1482, upgrade to CMS Made Simple version 1.7.1 or later.
3
What versions of CMS Made Simple are affected by CVE-2010-1482?
CVE-2010-1482 affects versions of CMS Made Simple prior to 1.7.1.
4
What kind of attacks can exploit CVE-2010-1482?
CVE-2010-1482 can be exploited through cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts into web pages.
5
Is there a workaround for CVE-2010-1482 until I can upgrade?
There is no official workaround for CVE-2010-1482; upgrading to the fixed version is the recommended action.