Test ID:	1.3.6.1.4.1.25623.1.0.804327
Category:	Web application abuses
Title:	CMS Made Simple < 1.11.13 Multiple XSS Vulnerabilities (Mar 2014) - Active Check
Summary:	CMS Made Simple is prone to multiple cross-site scripting (XSS); vulnerabilities.
Description:	Summary: CMS Made Simple is prone to multiple cross-site scripting (XSS) vulnerabilities. Vulnerability Insight: Multiple flaws exist due to improper validation of user supplied input to 'editevent.php', 'pagedefaults.php', 'adminlog.php', 'myaccount.php', 'siteprefs.php', 'addbookmark.php', 'index.php', 'editorFrame.php', 'addhtmlblob.php', 'addtemplate.php', 'addcss.php' scripts. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary HTML or script code, steal cookie-based authentication credentials and launch other attacks. Affected Software/OS: CMS Made Simple prior to version 1.11.13. Solution: Update to version 1.11.13 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-0334 BugTraq ID: 65898 http://www.securityfocus.com/bid/65898 CERT/CC vulnerability note: VU#526062 http://www.kb.cert.org/vuls/id/526062 Common Vulnerability Exposure (CVE) ID: CVE-2014-2092 BugTraq ID: 65746 http://www.securityfocus.com/bid/65746 http://packetstormsecurity.com/files/125353/CMSMadeSimple-1.11.10-Cross-Site-Scripting.html
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.