Exploit for CVE-2019-9053-CMS46635-python3

CVE-2019-2019 CVE-2019-9053

kitploit · 2026-08-25

Description

SQL injection vulnerability in CMS Made Simple versions before 2.2.10.

Entry point

Parameterm1_idlist · query param

Path/moduleinterface.php?mact=News,m1_,default,0

Unauthenticated time-based SQL injection via m1_idlist parameter in CMS Made Simple News module.

Affected software

Google Android= 7.0, 7.1.1, 7.1.2, 8.0, 8.1, 9.0

Cmsmadesimple Cms Made Simple= 2.2.8

All known vulnerabilities by product

Cms Made Simple

CVSS Score

8.1

HIGH SEVERITY

Version 3.0

VectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Exploit Details

Modified:2026-08-25 04:17

Last Seen:2026-08-26 03:25

Reporter:KitPloit

Tags

CMS Made SimpleSQL injectionbefore 2.2.10CMS

Other exploits for the same CVE

2026-08-26 KitPloitKITPLOIT

CMS-Made-Simple-2.2.9-CVE-2019-9053

2026-08-26 KitPloitKITPLOIT

CVE-2019-9053-Exploit-Python-3

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

CVE-2019-9053-port-py3

2026-08-26 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-YZHACKER-CVE-2019-9053-CMS46635-PYTHON3
# CVE-2019-2019-9053--CMS46635

CMS Made Simple < 2.2.10 - SQL-инъекция python3