CVE-2016-2784
26.05.2016, 14:59
CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS) attacks via a crafted HTTP Host header in a request.
| Vendor | Product | Version |
|---|---|---|
| cmsmadesimple | cms_made_simple | 1.0 |
| cmsmadesimple | cms_made_simple | 1.0.1 |
| cmsmadesimple | cms_made_simple | 1.0.2 |
| cmsmadesimple | cms_made_simple | 1.0.3 |
| cmsmadesimple | cms_made_simple | 1.0.4 |
| cmsmadesimple | cms_made_simple | 1.0.5 |
| cmsmadesimple | cms_made_simple | 1.0.6 |
| cmsmadesimple | cms_made_simple | 1.0.7 |
| cmsmadesimple | cms_made_simple | 1.0.8 |
| cmsmadesimple | cms_made_simple | 1.1 |
| cmsmadesimple | cms_made_simple | 1.1.1 |
| cmsmadesimple | cms_made_simple | 1.1.2 |
| cmsmadesimple | cms_made_simple | 1.1.3.1 |
| cmsmadesimple | cms_made_simple | 1.1.4.1 |
| cmsmadesimple | cms_made_simple | 1.2 |
| cmsmadesimple | cms_made_simple | 1.2.1 |
| cmsmadesimple | cms_made_simple | 1.2.2 |
| cmsmadesimple | cms_made_simple | 1.2.3 |
| cmsmadesimple | cms_made_simple | 1.2.4 |
| cmsmadesimple | cms_made_simple | 1.2.5 |
| cmsmadesimple | cms_made_simple | 1.3 |
| cmsmadesimple | cms_made_simple | 1.3.1 |
| cmsmadesimple | cms_made_simple | 1.4 |
| cmsmadesimple | cms_made_simple | 1.4.1 |
| cmsmadesimple | cms_made_simple | 1.5 |
| cmsmadesimple | cms_made_simple | 1.5.1 |
| cmsmadesimple | cms_made_simple | 1.5.2 |
| cmsmadesimple | cms_made_simple | 1.5.3 |
| cmsmadesimple | cms_made_simple | 1.5.4 |
| cmsmadesimple | cms_made_simple | 1.6 |
| cmsmadesimple | cms_made_simple | 1.6.1 |
| cmsmadesimple | cms_made_simple | 1.6.2 |
| cmsmadesimple | cms_made_simple | 1.6.3 |
| cmsmadesimple | cms_made_simple | 1.6.4 |
| cmsmadesimple | cms_made_simple | 1.6.5 |
| cmsmadesimple | cms_made_simple | 1.6.6 |
| cmsmadesimple | cms_made_simple | 1.6.7 |
| cmsmadesimple | cms_made_simple | 1.6.8 |
| cmsmadesimple | cms_made_simple | 1.6.9 |
| cmsmadesimple | cms_made_simple | 1.6.10 |
| cmsmadesimple | cms_made_simple | 1.7 |
| cmsmadesimple | cms_made_simple | 1.7.1 |
| cmsmadesimple | cms_made_simple | 1.8 |
| cmsmadesimple | cms_made_simple | 1.8.1 |
| cmsmadesimple | cms_made_simple | 1.8.2 |
| cmsmadesimple | cms_made_simple | 1.9 |
| cmsmadesimple | cms_made_simple | 1.9.1 |
| cmsmadesimple | cms_made_simple | 1.9.2 |
| cmsmadesimple | cms_made_simple | 1.9.3 |
| cmsmadesimple | cms_made_simple | 1.9.4 |
| cmsmadesimple | cms_made_simple | 1.9.4.1 |
| cmsmadesimple | cms_made_simple | 1.9.4.2 |
| cmsmadesimple | cms_made_simple | 1.9.4.3 |
| cmsmadesimple | cms_made_simple | 1.10 |
| cmsmadesimple | cms_made_simple | 1.10.1 |
| cmsmadesimple | cms_made_simple | 1.10.2 |
| cmsmadesimple | cms_made_simple | 1.10.3 |
| cmsmadesimple | cms_made_simple | 1.11 |
| cmsmadesimple | cms_made_simple | 1.11.1 |
| cmsmadesimple | cms_made_simple | 1.11.2 |
| cmsmadesimple | cms_made_simple | 1.11.2.1 |
| cmsmadesimple | cms_made_simple | 1.11.3 |
| cmsmadesimple | cms_made_simple | 1.11.4 |
| cmsmadesimple | cms_made_simple | 1.11.5 |
| cmsmadesimple | cms_made_simple | 1.11.6 |
| cmsmadesimple | cms_made_simple | 1.11.7 |
| cmsmadesimple | cms_made_simple | 1.11.8 |
| cmsmadesimple | cms_made_simple | 1.11.9 |
| cmsmadesimple | cms_made_simple | 1.11.10 |
| cmsmadesimple | cms_made_simple | 1.11.11 |
| cmsmadesimple | cms_made_simple | 1.11.12 |
| cmsmadesimple | cms_made_simple | 1.11.13 |
| cmsmadesimple | cms_made_simple | 1.12 |
| cmsmadesimple | cms_made_simple | 1.12.1 |
| cmsmadesimple | cms_made_simple | 2.0 |
| cmsmadesimple | cms_made_simple | 2.0.1 |
| cmsmadesimple | cms_made_simple | 2.0.1.1 |
| cmsmadesimple | cms_made_simple | 2.1 |
| cmsmadesimple | cms_made_simple | 2.1.1 |
| cmsmadesimple | cms_made_simple | 2.1.2 |
𝑥
= Vulnerable software versions
References