CVE-2016-2784

high-risk
Published 2016-05-26

CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to conduct cache poisoning attacks, modify links, and conduct cross-site scripting (XSS) attacks via a crafted HTTP Host header in a request.

Do I need to act?

~
6.1% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
1 public exploit available
39760
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.7/10 Medium
NETWORK / HIGH complexity

Affected Products (20)

Affected Vendors

Cmsmadesimple

References (12)

http://packetstormsecurity.com/files/136897/CMS-Made-Simple-Cache-Poisoning.html
http://seclists.org/fulldisclosure/2016/May/15
Vendor Advisory http://www.cmsmadesimple.org/2016/03/Announcing-CMSMS-1-12-2-kolonia/
http://www.cmsmadesimple.org/2016/04/Announcing-CMSMS-2-1-3-Black-Point/
http://www.securityfocus.com/archive/1/538272/100/0/threaded
https://www.exploit-db.com/exploits/39760/
http://packetstormsecurity.com/files/136897/CMS-Made-Simple-Cache-Poisoning.html
http://seclists.org/fulldisclosure/2016/May/15
Vendor Advisory http://www.cmsmadesimple.org/2016/03/Announcing-CMSMS-1-12-2-kolonia/
http://www.cmsmadesimple.org/2016/04/Announcing-CMSMS-2-1-3-Black-Point/
http://www.securityfocus.com/archive/1/538272/100/0/threaded
https://www.exploit-db.com/exploits/39760/
60
/ 100
high-risk
Severity 15/34 · Moderate
Exploitability 16/34 · Moderate
Exposure 29/34 · Critical