Description
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors.
References
- 20071010 Several vulnerabilities in CMS Made Simple 1.1.3.1 mailing-list
- 3223 third-party-advisory