ID de Prueba:	1.3.6.1.4.1.25623.1.0.808061
Categoría:	Web application abuses
Título:	CMS Made Simple Multiple Vulnerabilities (Jun 2016) - Active Check
Resumen:	CMS Made Simple is prone to multiple vulnerabilities.
Descripción:	Summary: CMS Made Simple is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - Malicious content in a CMS Made Simple installation by poisoning the web server cache when Smarty Cache is activated by modifying the Host HTTP Header in his request. - Lack of filtering of HTML entities in $_SERVER variable. Vulnerability Impact: Successful exploitation will allow remote attackers to obtain sensitive information or conduct cross site scripting attacks. Affected Software/OS: CMS Made Simple version 1.x prior to 1.12.2 and 2.x prior to 2.1.3. Solution: Update to version 1.12.2, 2.1.3 or later. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2784 Bugtraq: 20160504 CVE-2016-2784: CMS Made Simple < 2.1.3 & < 1.12.2 Web server Cache Poisoning (Google Search) http://www.securityfocus.com/archive/1/538272/100/0/threaded https://www.exploit-db.com/exploits/39760/ http://seclists.org/fulldisclosure/2016/May/15 http://packetstormsecurity.com/files/136897/CMS-Made-Simple-Cache-Poisoning.html
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.