CVE-2005-2846: Cmsmadesimple CMS Made Simple

High severity, CVSS 7.5. EPSS: 6.8% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nls[file][vx][vxsfx] parameter.

Affected products

• Cmsmadesimple CMS Made Simple: version 0.10 only

Published 2005-09-08. Last modified 2026-06-16.