CVE-2017-17734

CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions.

• CWE-200

• https://forum.cmsmadesimple.org/viewtopic.php?f=1&t=77737Issue Tracking, Vendor Advisory
• https://www.cmsmadesimple.org/2017/12/Announcing-CMSMS-v2.2.5-WawaIssue Tracking, Vendor Advisory
• https://forum.cmsmadesimple.org/viewtopic.php?f=1&t=77737Issue Tracking, Vendor Advisory
• https://www.cmsmadesimple.org/2017/12/Announcing-CMSMS-v2.2.5-WawaIssue Tracking, Vendor Advisory

Published

Dec 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17725In Exiv2 0.26, there is an integer overflow leading to a hea…
• CVE-2017-17727DedeCMS through 5.6 allows arbitrary file upload and PHP cod…
• CVE-2017-1773IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an…
• CVE-2017-17730DedeCMS through 5.7 has SQL Injection via the logo parameter…
• CVE-2017-17731DedeCMS through 5.7 has SQL Injection via the $_FILES superg…
• CVE-2017-17733Maccms 8.x allows remote command execution via the wd parame…
• CVE-2017-17735CMS Made Simple (CMSMS) before 2.2.5 does not properly cache…
• CVE-2017-17736Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows rem…
• CVE-2017-17737The BrightSign Digital Signage (4k242) device (Firmware 6.2.…
• CVE-2017-17738The BrightSign Digital Signage (4k242) device (Firmware 6.2.…
• CVE-2017-17739The BrightSign Digital Signage (4k242) device (Firmware 6.2.…
• CVE-2017-1774IBM Security Guardium Big Data Intelligence (SonarG) 3.1 dis…