CMS Made Simple 1.0.2 - SearchInput Cross-Site Scripting

CMS Made Simple 1.0.2 - SearchInput Cross-Site Scripting source: https://www.securityfocus.com/bid/21527/info CMS Made Simple is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

CMS Made Simple 1.0.2 - 'SearchInput' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21527/info CMS Made Simple is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting...

CVE-2005-3083

Cross-site scripting XSS vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2005-3083

CMS Made Simple 0.10 contains a cross-site scripting (XSS) vulnerability in index.php via the page parameter. Root cause is improper handling of the page parameter leading to script/HTML injection; impact implied is partial integrity compromise. CVSS 2.0 base score: 4.3 (Medium); vector: AV:N/AC:...

CMS Made Simple 0.10 - index.php Cross-Site Scripting

CMS Made Simple 0.10 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14937/info CMS Made Simple is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

cmsXSS.txt

Description: CMS lets you update your pages and keep the content on a static page that will not become stale regardless of how much other content gets placed on your site version:CMS Made Simple 0.10 vendor:http://www.cmsmadesimple.org Vulnerability: cross site script exploit:...

CVE-2005-2846

CMS Made Simple

CVE-2005-2846

PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nlsfilevxvxsfx parameter...

CMS Made Simple <= 0.10 - PHP injection

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: CMS Made Simple - PHP injection Version = 0.10 Homepage: http://www.cmsmadesimple.org/ Author: Filip Groszynski VXSfx Date: 31 August 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Background: CMS Made Simple is an easy...

CMS010.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: CMS Made Simple - PHP injection Version -------------------------------------------------------- Exploit: example.html: inpu...

CMS Made Simple admin/lang.php nls Parameter Remote File Inclusion

The remote host appears to be running CMS Made Simple, a content management system written in PHP. The version of CMS Made Simple installed on the remote host fails to properly sanitize user-supplied input to the 'nls' parameter of the 'admin/lang.php' script before using it to include PHP code. ...

CMS Made Simple 0.10 - 'Lang.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/14709/info CMS Made Simple is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may exploit this issue to execute arbitrary remote PHP code on an affected...

CMS Made Simple 0.10 - Lang.php Remote File Inclusion

CMS Made Simple 0.10 - Lang.php Remote File Inclusion source: https://www.securityfocus.com/bid/14709/info CMS Made Simple is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may exploit this issu...

CMSsimpleXSS.txt

CMS Made Simple is an open source project which uses the smarty template engine in various places. Its website is at http://cmsmadesimple.org while the smarty site is at http://smarty.php.net CMS Made Simple suffers from a Cross Site scripting XSS and path disclosure vulnerability;...