CVE-2007-5441 — CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by (1) adding a user via a direct request to admin/adduser.php and (2) reading the admin log via an "admin/adminlog.php?page=1" request

Back Back to CVE browser

MEDIUM

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by (1) adding a user via a direct request to admin/adduser.php and (2) reading the admin log via an "admin/adminlog.php?page=1" request

Published Oct 14, 2007

6.5

MEDIUM

CVSS 2.0

EPSS 1.11%

Description

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by (1) adding a user via a direct request to admin/adduser.php and (2) reading the admin log via an "admin/adminlog.php?page=1" request.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.11% 0.01108

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01108

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (12 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.11% (0.01108)	64.63th	v5 (v2026.06.15)
Jun 15, 2026	1.11% (0.01108)	61.47th	v5 (v2026.06.15)
Mar 17, 2025	0.38% (0.00377)	57.16th	v4 (v2025.03.14)
Dec 12, 2024	0.28% (0.00283)	69.45th	v3 (v2023.03.01)
Jul 10, 2024	0.26% (0.00259)	65.90th	v3 (v2023.03.01)
Jun 2, 2024	0.25% (0.00249)	64.81th	v3 (v2023.03.01)
Mar 17, 2024	0.24% (0.00242)	63.54th	v3 (v2023.03.01)
Mar 7, 2023	0.22% (0.00225)	58.88th	v3 (v2023.03.01)
Mar 6, 2023	1.13% (0.01132)	56.11th	v2 (v2022.01.01)
Sep 22, 2022	1.13% (0.01132)	54.59th	v2 (v2022.01.01)
Apr 1, 2022	1.13% (0.01132)	52.58th	v2 (v2022.01.01)
Feb 4, 2022	1.13% (0.01132)	30.65th	v2 (v2022.01.01)

Weaknesses (1)

CWE-264

References (4)

http://blog.cmsmadesimple.org/2007/10/07/announcing-cms-made-simple-1141/
x_refsource_CONFIRM
http://osvdb.org/45481
vdb-entryx_refsource_OSVDB
http://securityreason.com/securityalert/3223
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/481984/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Link	Providers	Tags
http://blog.cmsmadesimple.org/2007/10/07/announcing-cms-made-simple-1141/		x_refsource_CONFIRM
http://osvdb.org/45481		vdb-entryx_refsource_OSVDB
http://securityreason.com/securityalert/3223		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/481984/100/0/threaded		mailing-listx_refsource_BUGTRAQ

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 14, 2007

Updated Aug 7, 2024

Reserved Oct 14, 2007

Link CVE-2007-5441

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-5441

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-5441