CVE-2007-5442

high

Description

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors.

References

http://www.securityfocus.com/archive/1/481984/100/0/threaded

http://securityreason.com/securityalert/3223

Details

Source: Mitre, NVD

Published: 2007-10-14

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 3.5

Vector: CVSS2#AV:N/AC:M/Au:S/C:N/I:P/A:N

Severity: Low

CVSS v3

Base Score: 8.1

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Severity: High

EPSS

EPSS: 0.00129

Detections

Analytics