CVE-2021-40961

CMS Made Simple <=2.2.15 is affected by SQL injection in modules/News/function.admin_articlestab.php. The $sortby variable is concatenated with $query1, but it is possible to inject arbitrary SQL language without using the '.

• CWE-89

• https://github.com/beerpwn/CVE/blob/master/cms_made_simple_2021/sqli_order_by/CMS-MS-SQLi-report.mdExploit, Third Party Advisory
• https://packetstormsecurity.com/files/161895/CMS-Made-Simple-2.2.15-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://seclists.org/fulldisclosure/2021/Mar/49Exploit, Mailing List, Third Party Advisory
• https://www.soteritsecurity.com/blog/2023/01/CMS-Made-Simple_CVE-2021-40961.html
• https://github.com/beerpwn/CVE/blob/master/cms_made_simple_2021/sqli_order_by/CMS-MS-SQLi-report.mdExploit, Third Party Advisory
• https://packetstormsecurity.com/files/161895/CMS-Made-Simple-2.2.15-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://seclists.org/fulldisclosure/2021/Mar/49Exploit, Mailing List, Third Party Advisory
• https://www.soteritsecurity.com/blog/2023/01/CMS-Made-Simple_CVE-2021-40961.html

Published

Jun 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40954Laiketui 3.5.0 is affected by an arbitrary file upload vulne…9.8
• CVE-2021-40955SQL injection exists in LaiKetui v3.5.0 the background admin…7.2
• CVE-2021-40956LaiKetui v3.5.0 has SQL injection in the background through …7.5
• CVE-2021-40959A reflected cross-site scripting vulnerability in MONITORAPP…6.1
• CVE-2021-4096The Fancy Product Designer plugin for WordPress is vulnerabl…8.8
• CVE-2021-40960Galera WebTemplate 1.0 is affected by a directory traversal …9.8
• CVE-2021-40964A Path Traversal vulnerability exists in TinyFileManager all…6.5
• CVE-2021-40965A Cross-Site Request Forgery (CSRF) vulnerability exists in …8.8
• CVE-2021-40966A Stored XSS exists in TinyFileManager All version up to and…5.4
• CVE-2021-40968Cross-site scripting (XSS) vulnerability in templates/instal…6.1
• CVE-2021-40969Cross-site scripting (XSS) vulnerability in templates/instal…6.1
• CVE-2021-4097phpservermon is vulnerable to Improper Neutralization of CRL…5.4