NVD

Id
18772  
Name
CVE-2016-2784  
Description
CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS) attacks via a crafted HTTP Host header in a request.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-05-26  
Modified Date
2016-05-26  
Seq
2016-2784  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
103837 18772 CVE-2016-2784 http://packetstormsecurity.com/files/136897/CMS-Made-Simple-Cache-Poisoning.html  View
103838 18772 CVE-2016-2784 20160506 CVE-2016-2784: CMS Made Simple < 2.1.3 & < 1.12.2 Web server Cache Poisoning  View
103839 18772 CVE-2016-2784 http://www.cmsmadesimple.org/2016/03/Announcing-CMSMS-1-12-2-kolonia/  View
103840 18772 CVE-2016-2784 http://www.cmsmadesimple.org/2016/04/Announcing-CMSMS-2-1-3-Black-Point/  View
103841 18772 CVE-2016-2784 20160504 CVE-2016-2784: CMS Made Simple < 2.1.3 & < 1.12.2 Web server Cache Poisoning  View
103842 18772 CVE-2016-2784 39760  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2159 JVNDB-2016-002932 CMS Made Simple におけるキャッシュポイズニング攻撃を実行される脆弱性 CMS Made Simple には、Smarty Cache がアクティベートされている場合、キャッシュポイズニング攻撃を実行され、リンクを変更される、およびクロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2016-2784 89290 CVE-2016-2784 18772 2.6 4.7 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002932.html 2016-03-28 2016-05-30 View