CVE-2019-9055

An issue was discovered in CMS Made Simple 2.2.8. In the module DesignManager (in the files action.admin_bulk_css.php and action.admin_bulk_template.php), with an unprivileged user with Designer permission, it is possible reach an unserialize call with a crafted value in the m1_allparms parameter, and achieve object injection.

• CWE-502

• http://packetstormsecurity.com/files/155322/CMS-Made-Simple-2.2.8-Remote-Code-Execution.html
• https://blog.certimetergroup.com/it/articolo/security/CMS_Made_Simple_deserialization_attack_%28CVE-2019-9055%29
• https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwgRelease Notes, Vendor Advisory
• https://www.cmsmadesimple.org/2019/03/Announcing-CMS-Made-Simple-v2.2.10-SpuzzumRelease Notes, Vendor Advisory
• http://packetstormsecurity.com/files/155322/CMS-Made-Simple-2.2.8-Remote-Code-Execution.html
• https://blog.certimetergroup.com/it/articolo/security/CMS_Made_Simple_deserialization_attack_%28CVE-2019-9055%29
• https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwgRelease Notes, Vendor Advisory
• https://www.cmsmadesimple.org/2019/03/Announcing-CMS-Made-Simple-v2.2.10-SpuzzumRelease Notes, Vendor Advisory

Published

Mar 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9048An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF…
• CVE-2019-9049An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF…
• CVE-2019-9050An issue was discovered in Pluck 4.7.9-dev1. It allows admin…
• CVE-2019-9051An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF…
• CVE-2019-9052An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF…
• CVE-2019-9053An issue was discovered in CMS Made Simple 2.2.8. It is poss…
• CVE-2019-9056An issue was discovered in CMS Made Simple 2.2.8. In the mod…
• CVE-2019-9057An issue was discovered in CMS Made Simple 2.2.8. In the mod…8.8
• CVE-2019-9058An issue was discovered in CMS Made Simple 2.2.8. In the adm…7.2
• CVE-2019-9059An issue was discovered in CMS Made Simple 2.2.8. It is poss…
• CVE-2019-9060An issue was discovered in CMS Made Simple 2.2.8. It is poss…7.5
• CVE-2019-9061An issue was discovered in CMS Made Simple 2.2.8. In the mod…8.8