CVE-2019-9059

An issue was discovered in CMS Made Simple 2.2.8. It is possible, with an administrator account, to achieve command injection by modifying the path of the e-mail executable in Mail Settings, setting "sendmail" in the "Mailer" option, and launching the "Forgot your password" feature.

• CWE-77

• https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwgRelease Notes, Vendor Advisory
• https://www.cmsmadesimple.org/2019/03/Announcing-CMS-Made-Simple-v2.2.10-SpuzzumRelease Notes, Vendor Advisory
• https://newsletter.cmsmadesimple.org/w/89247Qog4jCRCuRinvhsofwgRelease Notes, Vendor Advisory
• https://www.cmsmadesimple.org/2019/03/Announcing-CMS-Made-Simple-v2.2.10-SpuzzumRelease Notes, Vendor Advisory

Published

Mar 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9052An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF…
• CVE-2019-9053An issue was discovered in CMS Made Simple 2.2.8. It is poss…
• CVE-2019-9055An issue was discovered in CMS Made Simple 2.2.8. In the mod…
• CVE-2019-9056An issue was discovered in CMS Made Simple 2.2.8. In the mod…
• CVE-2019-9057An issue was discovered in CMS Made Simple 2.2.8. In the mod…8.8
• CVE-2019-9058An issue was discovered in CMS Made Simple 2.2.8. In the adm…7.2
• CVE-2019-9060An issue was discovered in CMS Made Simple 2.2.8. It is poss…7.5
• CVE-2019-9061An issue was discovered in CMS Made Simple 2.2.8. In the mod…8.8
• CVE-2019-9062PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-S…
• CVE-2019-9063PHP Scripts Mall Auction website script 2.0.4 allows paramet…
• CVE-2019-9064PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory T…
• CVE-2019-9065PHP Scripts Mall Custom T-Shirt Ecommerce Script 3.1.1 allow…