Vulnerabilites in CMS Made Simple

[anasampedro]

Hi,
I've been testing several CMSs and found that CMS Made Simple is quite good for what I need. But there is not much information about security of it. I have found only 2 vulnerabilities from 2005. Is it because it is a not wide used CMS and so there is not much people interested on it? Or is it just a matter of good programming of it?
Thank in advance

[Signex]

I know about cmsms since version 0.10 and never heard of someone being hacked using cmsms

[Pierre M.]

I remember there was a security review just before turning the 1.0 milestone. So I think our beloved devs are security conscious.

But nobody is invulnerable. But simplicity contributes to security.

See the problems phpBB experiences. Lots of them are just PHP issues even if their devs make a good work. So I think success will bring some security troubles as extra unwanted gifts.

Just my opinion...

PM

[Dee]

For some more reading/info on the matter:
http://blog.cmsmadesimple.org/2007/01/1 ... -security/
http://forum.cmsmadesimple.org/index.ph ... 098.0.html
http://forum.cmsmadesimple.org/index.ph ... 271.0.html
http://forum.cmsmadesimple.org/index.ph ... 165.0.html
http://forum.cmsmadesimple.org/index.ph ... 625.0.html

Regards,
D