CVE-2014-2219

Cross-site scripting XSS vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier, possibly as downloaded before February 26, 2014, allows remote attackers to inject arbitrary web script or HTML via the d parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier, possibly as downloaded before February 26, 2014, allows remote attackers to inject arbitrary web script or HTML via the d parameter...

CVE-2014-2219

Cross-site scripting XSS vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier, possibly as downloaded before February 26, 2014, allows remote attackers to inject arbitrary web script or HTML via the d parameter...

CMSimple 3.54 Cross Site Scripting

Advisory ID: HTB23205 Product: CMSimple Vendor: Preben Bjorn Biermann Madsen Vulnerable Versions: 3.54 and probably prior Tested Version: 3.54 Advisory Publication: February 26, 2014 without technical details Vendor Notification: February 26, 2014 Vendor Patch: February 26, 2014 Public Disclosure...

Cross-Site Scripting (XSS) in CMSimple

High-Tech Bridge Security Research Lab discovered vulnerability in CMSimple, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Reflected Cross-Site Scripting XSS in CMSimple: CVE-2014-2219 The vulnerability exists due to insufficient sanitisation of user-supplied data in "d"...

CMSimple 3.3 - index.php Cross-Site Scripting

CMSimple 3.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/52661/info CMSimple is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

CMSimple 3.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52661/info CMSimple is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affect...

CMSimple 3.3 Cross Site Scripting

CMSimple.COM vendor: www.cmsimple.com Version: CMSimple 3.3 Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: www.epsilonlambda.co.cc Google dork: Powered by CMSimple...

CMSimple XSRF Vulnerability

Exploit for php platform in category web applications =========================== CMSimple XSRF Vulnerability =========================== - Title : CMSimple XSRF Vulnerability - Affected Version :CMSimple $v1 if isarray$v1 foreach$v1 as $k2 = $v2 if !isarray$v2 initvar$k1.''.$k2; $GLOBALS$a$k1$k2...

Month Of Abysssec Undisclosed Bugs - CMSimple 3.2

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | $v1 if isarray$v1 foreach$v1 as $k2 = $v2 if !isarray$v2 initvar$k1.''.$k2; $GLOBALS$a$k1$k2 = $GLOBALS$k1.''.$k2; $GLOBALS$a$k1$k2 = stsl$GLOBALS$a$k1$k2; if $k1.$k2 == 'editorbuttons'$text .=...

CMSimple - Cross-Site Request Forgery

CMSimple - Cross-Site Request Forgery ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | $v1 if isarray$v1 foreach$v1 as $k2 = $v2 if !isarray$v2 initvar$k1.''.$k2; $GLOBALS$a$k1$k2 = $GLOBALS$k1.''.$k2; $GLOBALS$a$k1$k2 = stsl$GLOBALS$a$k1$k2; if $k1.$k2 ==...

CMSimple - Cross-Site Request Forgery

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | $v1 if isarray$v1 foreach$v1 as $k2 = $v2 if !isarray$v2 initvar$k1.''.$k2; $GLOBALS$a$k1$k2 = $GLOBALS$k1.''.$k2; $GLOBALS$a$k1$k2 = stsl$GLOBALS$a$k1$k2; if $k1.$k2 == 'editorbuttons'$text .=...

XSRF (CSRF) in CMSimple

Vulnerability ID: HTB22561 Reference: http://www.htbridge.ch/advisory/xsrfcsrfincmsimple.html Product: CMSimple Vendor: Peter Andreas Harteg http://www.cmsimple.org/ Vulnerable Version: 3.3 and Probably Prior Versions Vendor Notification: 02 August 2010 Vulnerability Type: CSRF Cross-Site Request...

CMSimple 3.3 Cross Site Request Forgery / Cross Site Scripting

==================================== Vulnerability ID: HTB22558 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmsimple.html Product: CMSimple Vendor: Peter Andreas Harteg http://www.cmsimple.org/ Vulnerable Version: 3.3 and Probably Prior Versions Vendor Notification: 02 August 201...

XSS vulnerability in CMSimple

Vulnerability ID: HTB22559 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmsimple1.html Product: CMSimple Vendor: Peter Andreas Harteg http://www.cmsimple.org/ Vulnerable Version: 3.3 and Probably Prior Versions Vendor Notification: 02 August 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in CMSimple

Vulnerability ID: HTB22558 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmsimple.html Product: CMSimple Vendor: Peter Andreas Harteg http://www.cmsimple.org/ Vulnerable Version: 3.3 and Probably Prior Versions Vendor Notification: 02 August 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in CMSimple

Vulnerability ID: HTB22560 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincmsimple2.html Product: CMSimple Vendor: Peter Andreas Harteg http://www.cmsimple.org/ Vulnerable Version: 3.3 and Probably Prior Versions Vendor Notification: 02 August 2010 Vulnerability Type: XSS Cross Site...

CMSimple 3.3 - Cross-Site Scripting Cross-Site Request Forgery

CMSimple 3.3 - Cross-Site Scripting Cross-Site Request Forgery source: https://www.securityfocus.com/bid/42470/info CMSimple is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. An attacker can exploit these vulnerabilities to execute arbitrary...

CMSimple 3.3 - Cross-Site Scripting / Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/42470/info CMSimple is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the...

Multiple Vulnerabilities in CMSimple

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CMSimple which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in CMSimple The vulnerability exists due to input sanitation...