← Back

Cms Made Simple

cms_made_simple

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Cms Made Simple
cms_made_simple
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-2267
1Cms Made Simple
1Cms Made Simple
Apr 23, 2026
May 16, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in (...Show more
Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in (1) .jsp, (2) .php3, (3) .cgi, (4) .dhtml, (5) .phtml, (6) .php5, or (7) .jar, then accessing it via a direct request to the file in modules/FileManager/postlet/.Show less