CMS Made Simple 1.6.6 - Multiple Vulnerabilities

CMS Made Simple 1.6.6 - Multiple Vulnerabilities . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com Greetz to all Darkc0de ,AI,ICW, AH Memebers Shoutz to...

CMS Made Simple 1.6.6 - Local File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/38234/info CMS Made Simple is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using...

CMS Made Simple 1.x - Cross-Site Scripting / Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/40483/info CMS Made Simple is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied inputs. The application is also prone to a cross-site request-forgery vulnerability. An attacker may...

CMS Made Simple <= 1.6.2 Local File Disclosure Vulnerability

No description provided by source. CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download:...

CMS Made Simple url Parameter Arbitrary File Access

The remote web server is hosting CMS Made Simple, a content management system written in PHP. The version of CMS Made Simple installed on the remote host fails to sanitize user-supplied input to 'url' parameter in script 'modules/Printing/output.php' before using it to display the contents of a...

CMS Made Simple < 1.6.3 Local File Include Vulnerability

Binary data 5123.prm...

CMS Made Simple 1.6.2 - Local File Disclosure

CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download: http://s3.amazonaws.com/cmsms/downloads/4033/cmsmadesimple-1.6.2-full.tar.gz Vulnerability:...

CMS Made Simple 1.6.2 File Disclosure

CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download: http://s3.amazonaws.com/cmsms/downloads/4033/cmsmadesimple-1.6.2-full.tar.gz Vulnerability:...

CMS Made Simple <= 1.6.2 Local File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ CMS Made Simple = 1.6.2 Local File Disclosure Vulnerability ============================================================ CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009...

CMS Made Simple 1.6.2 - Local File Disclosure

CMS Made Simple 1.6.2 - Local File Disclosure CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download:...

CVE-2008-5642

Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. dot dot in a cmslanguage cookie...

Directory traversal

Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. dot dot in a cmslanguage cookie...

CVE-2008-5642

CMS Made Simple 1.4.1 is affected by a directory traversal in admin/login.php, exploitable via a crafted cms_language cookie to read arbitrary server files. Root cause: improper validation of the cms_language cookie enabling path traversal. Exploitation details are not provided beyond the basic v...

CVE-2008-5642

Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. dot dot in a cmslanguage cookie...

CMS Made Simple admin/login.php cms_language Cookie Local File Inclusion

The remote host is running CMS Made Simple, a content management system written in PHP. The version of CMS Made Simple installed on the remote host fails to sanitize user-supplied input to the 'cmslanguage' cookie when passed to the 'admin/login.php' script before using it to include PHP code...

CMS Made Simple admin/login.php cms_language Cookie Local File Inclusion

Binary data 4773.prm...

CMS Made Simple 1.4.1 Local File Inclusion Vulnerability

No description provided by source. Type: Directory Traversal vulnerability Unix tested / Root privileges escalation Vendor: CMS Made Simple Software: CMS Made Simple 1.4.1 "Spring Garden" and probably others ... Author: M4ck-h@cK Date 29.11.2008 Home: sweet home contact: no, thx : Exploit: Demo: ...

cmsmadesimple-lfi.txt

Type: Directory Traversal vulnerability Unix tested / Root privileges escalation Vendor: CMS Made Simple Software: CMS Made Simple 1.4.1 "Spring Garden" and probably others ... Author: M4ck-h@cK Date 29.11.2008 Home: sweet home contact: no, thx : Exploit: Demo: on...

CMS Made Simple 1.4.1 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== CMS Made Simple 1.4.1 Local File Inclusion Vulnerability ======================================================== Type: Directory Traversal vulnerability Unix tested / Root privilege...

CMS Made Simple 1.4.1 - Local File Inclusion

CMS Made Simple 1.4.1 - Local File Inclusion Type: Directory Traversal vulnerability Unix tested / Root privileges escalation Vendor: CMS Made Simple Software: CMS Made Simple 1.4.1 "Spring Garden" and probably others ... Author: M4ck-h@cK Date 29.11.2008 Home: sweet home contact: no, thx :...