CVE

Id
89603  
CVE No.
CVE-2016-2784  
Status
Candidate  
Description
CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS) attacks via a crafted HTTP Host header in a request.  
Phase
Assigned (20160229)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
775702 89603 CVE-2016-2784 BUGTRAQ:20160504 CVE-2016-2784: CMS Made Simple < 2.1.3 & < 1.12.2 Web server Cache Poisoning  View
775703 89603 CVE-2016-2784 URL:http://www.securityfocus.com/archive/1/archive/1/538272/100/0/threaded  View
775704 89603 CVE-2016-2784 EXPLOIT-DB:39760  View
775705 89603 CVE-2016-2784 URL:https://www.exploit-db.com/exploits/39760/  View
775706 89603 CVE-2016-2784 FULLDISC:20160506 CVE-2016-2784: CMS Made Simple < 2.1.3 & < 1.12.2 Web server Cache Poisoning  View
775707 89603 CVE-2016-2784 URL:http://seclists.org/fulldisclosure/2016/May/15  View
775708 89603 CVE-2016-2784 MISC:http://packetstormsecurity.com/files/136897/CMS-Made-Simple-Cache-Poisoning.html  View
775709 89603 CVE-2016-2784 CONFIRM:http://www.cmsmadesimple.org/2016/03/Announcing-CMSMS-1-12-2-kolonia/  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3393 JVNDB-2016-004166 Red Hat Satellite の spacewalk-java におけるクロスサイトスクリプティングの脆弱性 Red Hat Satellite の spacewalk-java には、スナップショットデータの閲覧に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-3097 89603 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004166.html  View