Логотип exploitDog
bind:CVE-2019-9056
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-9056

Количество 2

Количество 2

nvd логотип

CVE-2019-9056

почти 7 лет назад

An issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers (in the file class.FrontEndUsersManipulate.php or class.FrontEndUsersManipulator.php), it is possible to reach an unserialize call with an untrusted __FEU__ cookie, and achieve authenticated object injection.

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-c5m9-pvx4-w42j

больше 3 лет назад

An issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers (in the file class.FrontEndUsersManipulate.php or class.FrontEndUsersManipulator.php), it is possible to reach an unserialize call with an untrusted __FEU__ cookie, and achieve authenticated object injection.

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2019-9056

An issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers (in the file class.FrontEndUsersManipulate.php or class.FrontEndUsersManipulator.php), it is possible to reach an unserialize call with an untrusted __FEU__ cookie, and achieve authenticated object injection.

CVSS3: 8.8
1%
Низкий
почти 7 лет назад
github логотип
GHSA-c5m9-pvx4-w42j

An issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers (in the file class.FrontEndUsersManipulate.php or class.FrontEndUsersManipulator.php), it is possible to reach an unserialize call with an untrusted __FEU__ cookie, and achieve authenticated object injection.

CVSS3: 8.8
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу