CVE-2019-9061: High severity simple cms vulnerability
Published Mar 26, 2019
·Updated
An issue was discovered in CMS Made Simple 2.2.8. In the module ModuleManager (in the file action.installmodule.php), it is possible to reach an unserialize call with untrusted input and achieve authenticated object injection by using the "install module" feature.
Affected Software
1 affected component
CMSmadesimple CMS Made Simple<=2.2.8
Event History
Mar 26, 2019
CVE Published
via MITRE·04:49 PM
Data Sourced
via MITRE·04:49 PM
Description
Data Sourced
via NVD·05:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2019-9061.
2
What is the severity rating of CVE-2019-9061?
CVE-2019-9061 has a severity rating of 8.8 (high).
3
What is the affected software by CVE-2019-9061?
The affected software by CVE-2019-9061 is CMS Made Simple version 2.2.8.
4
What is the CWE ID associated with CVE-2019-9061?
The CWE ID associated with CVE-2019-9061 is CWE-1321 and CWE-502.
5
How can I fix CVE-2019-9061?
To fix CVE-2019-9061, you can update CMS Made Simple to version 2.2.10 or apply the necessary patches.