254 matches found
CVE-2007-0551
CMSimple 2.7 is affected by CVE-2007-0551 via multiple PHP remote file inclusion vulnerabilities in cms.php, allowing an attacker to execute arbitrary PHP code through the pth[file][config] or pth[file][image] parameters. The issue stems from including user-supplied URLs, enabling code execution ...
cmsimple27-rfi.txt
----------------------------------------------- cmsimple 2.7 Remote File Include ----------------------------------------------- Author: Alkmandz ----------------------------------------------- Vuln Code: if !@ include $pth'file''pluginindex' if@include$pth'file''image'exit;...
cmsimple 2.7 Remote File Include
----------------------------------------------- cmsimple 2.7 Remote File Include ----------------------------------------------- Author: Alkmandz ----------------------------------------------- Vuln Code: if !@ include $pth'file''pluginindex' if@include$pth'file''image'exit;...
CMSimple Cross Site Scripting
Aria-Security.net Advisory Discovered by: OUTLAW www.Aria-security.net Gr33t to: A.u.r.a & l2odon & R@1D3N @ DrtRp & Cl0wn Software: CMSimple Attack method: Cross Site Scripting Original advisory:http://www.aria-security.net/advisory/cmsimple.txt Proof of Concept: Search in:...
CMSimple 'index.php?search' XSS Vulnerability - Active Check
CMSimple is prone to cross-site scripting XSS attacks due to its failure to sanitize user-supplied input to the search field. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CMSimple Guestbook Module index.php XSS
The remote host is running CMSimple, a CMS written in PHP. The version of CMSimple installed on the remote host is prone to cross-site scripting attacks due to its failure to sanitize user-supplied input to both the search and guestbook modules. %NASLMINLEVEL 70300 Josh Zlatin-Amishav josh at ram...
CMSimple index.php search Function XSS
The remote host is running CMSimple, a CMS written in PHP. The version of CMSimple installed on the remote host is prone to cross-site scripting attacks due to its failure to sanitize user-supplied input to the search field. %NASLMINLEVEL 70300 Josh Zlatin-Amishav josh at ramat dot cc GPLv2 Chang...
CVE-2005-2392
Cross-site scripting XSS vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function...
CVE-2005-2392
Cross-site scripting XSS vulnerability in index.php for CMSimple 2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter in the search function...
CVE-2005-2392
CMSimple is affected by a cross-site scripting (XSS) vulnerability in index.php via the search parameter in the search function. The issue affects CMSimple 2.4 and earlier, arising from failure to sanitize user-supplied input in the search field. Public references in the provided documents confir...
[SA16147] CMSimple "search" Cross-Site Scripting Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CMSimpleXSS.txt
CMSimple 'search' variable XSS Vendor urL:http://www.cmsimple.dk/ Advisory:http://lostmon.blogspot.com/2005/07/ cmsimple-search-variable-xss.html vendor Url fix:http://www.cmsimple.dk/forum/viewtopic.php?t=2470 Vendor confirmed:YES exploit available:yes CMSimple is a simple content management...