Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2019-9053

An issue was discovered in CMS Made Simple 2.2.8.

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB, 46 proofs of concept on GitHub

Summary

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.

Timeline

  1. CVE published
  2. Public exploit on Exploit-DB

    EDB-46635

  3. Record last updated
  4. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • n/a n/a

    Version range not reported

References 52

cmsmadesimple.org

newsletter.cmsmadesimple.org

Exploit-DB

packetstormsecurity.com

GitHub · Perseus99999/CVE-2019-9053-working-

GitHub · 0xftorres/CVE-2019-9053-Fixed

GitHub · 4nner/CVE-2019-9053

GitHub · Ap0cryph1c/CVE-2019-9053

GitHub · Azrenom/CMS-Made-Simple-2.2.9-CVE-2019-9053

GitHub · BjarneVerschorre/CVE-2019-9053

GitHub · Boon-Rekcah/CMS-Made-Simple-2.2.9-CVE-2019-9053

GitHub · CaelumIsMe/CVE-2019-9053-POC

GitHub · Dh4nuJ4/SimpleCTF-UpdatedExploit

GitHub · ELIZEUOPAIN/CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit

GitHub · Hackheart-tech/-exploit-lab

GitHub · ImperialX1104/Simple-CTF-Writeup

GitHub · JagdeepSinghCeh/cms-made-simple-python3

GitHub · Jason-Siu/CVE-2019-9053-Exploit-in-Python-3

GitHub · Jeanback1/CVE-2019-9053-exploit

GitHub · Kalidas-7/CVE-2019-9053

GitHub · Mahamedm/CVE-2019-9053-Exploit-Python-3

GitHub · Slayerma/-CVE-2019-9053

GitHub · TeymurNovruzov/CVE-2019-9053-python3-remastered

GitHub · Vedantrana73/cve-2019-9053-py3

GitHub · Yzhacker/CVE-2019-9053-CMS46635-python3

GitHub · byrek/CVE-2019-9053

GitHub · coolkiee/CVE-2019-9053

GitHub · d3athcod3/46635.py_CVE-2019-9053

GitHub · davcwikla/CVE-2019-9053-exploit

GitHub · del0x3/CVE-2019-9053-port-py3

GitHub · fernandobortotti/CVE-2019-9053

GitHub · h3x0v3rl0rd/CVE-2019-9053

GitHub · hf3cyber/CMS-Made-Simple-2.2.9-Unauthenticated-SQL-Injection-Exploit-CVE-2019-9053-

GitHub · iTzR1g/CVE-2019-9053

GitHub · im-suman-roy/CVE-2019-9053

GitHub · jtoalu/CTF-CVE-2019-9053-GTFOBins

GitHub · jyothsna-Git007/CMS-Made-Simple-2.2.10---SQL-Injection

GitHub · kahluri/CVE-2019-9053

GitHub · kaizoku73/CVE-2019-9053

GitHub · killukeren/-CVE-2019-9053

GitHub · maraspiras/46635.py

GitHub · pasan2002/CVE-2019-9053---CMS-Made-Simple-SQL-Injection-Exploit-Modified-

GitHub · paulameg/SimpleCTF-THM-Walkthrough

GitHub · quliyevresul7777/CVE-2019-9053

GitHub · rgkue/mysqli

GitHub · rideckszz/poc-CVE-2019-9053

GitHub · so1icitx/CVE-2019-9053

GitHub · tim-karov/cmsms-sqli

GitHub · v4rr10r/CVE-2019-9053

GitHub · zmiddle/Simple_CMS_SQLi