1250 matches found
CVE-2017-6072
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaultadmin...
CVE-2017-6072
CMS Made Simple Form Builder (CMSMS) for CMS Made Simple version 1.x is affected by CVE-2017-6072, with exploitation allowing information disclosure via defaultadmin prior to version 0.8.1.6. The root cause is an information-disclosure vulnerability in the Form Builder module that enables remote ...
CMS Made Simple Cross-Site Request Forgery Vulnerability
CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site request forgery vulnerability exists ...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in CMS Made Simple before 2.1.6 allows remote attackers to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request...
CVE-2016-7904
Cross-site request forgery CSRF vulnerability in CMS Made Simple before 2.1.6 allows remote attackers to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request...
CVE-2016-7904
Cross-site request forgery CSRF vulnerability in CMS Made Simple before 2.1.6 allows remote attackers to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request...
CVE-2016-7904
CMS Made Simple CVE-2016-7904 is a CSRF in admin/adduser.php that lets an attacker hijack admin authentication to create accounts on versions before 2.1.6. Impact includes unauthorized admin account creation; remediation is to upgrade to 2.1.6 or newer.
CVE-2016-7904
Cross-site request forgery CSRF vulnerability in CMS Made Simple before 2.1.6 allows remote attackers to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request...
CMS Made Simple 2.1.5 - Cross-Site Scripting
CMS Made Simple 2.1.5 - Cross-Site Scripting. Webapps exploit for PHP platform Exploit Title: CMS made simple Persistent XSS vulnerability Date:2016-11-01 Exploit Author: liu zhu Vendor Homepage:http://www.cmsmadesimple.org/ Software...
CMS Made Simple Multiple Vulnerabilities (Jun 2016) - Active Check
CMS Made Simple is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cmsmadesimple:cmsmadesimple...
CVE-2016-2784
CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to conduct cache poisoning attacks, modify links, and conduct cross-site scripting XSS attacks via a crafted HTTP Host header in a request...
CVE-2016-2784
CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to conduct cache poisoning attacks, modify links, and conduct cross-site scripting XSS attacks via a crafted HTTP Host header in a request...
CVE-2016-2784
CMS Made Simple is vulnerable to a cache-poisoning/XSS issue when Smarty Cache is active. A remote attacker can craft the Host header to poison the web server cache and modify links, potentially enabling XSS. Affected are CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2. Exploitation has be...
CVE-2016-2784
CMS Made Simple 2.x before 2.1.3 and 1.x before 1.12.2, when Smarty Cache is activated, allow remote attackers to conduct cache poisoning attacks, modify links, and conduct cross-site scripting XSS attacks via a crafted HTTP Host header in a request...
CMS Made Simple < 2.1.3 / < 1.12.1 - Web Server Cache Poisoning
Exploit for php platform in category web applications ============================================= Web Server Cache Poisoning in CMS Made Simple ============================================= CVE-2016-2784 Product Description =================== CMS Made Simple is a great tool with many plugins t...
CMS Made Simple < 1.12.1 / < 2.1.3 - Web Server Cache Poisoning
============================================= Web Server Cache Poisoning in CMS Made Simple ============================================= CVE-2016-2784 Product Description =================== CMS Made Simple is a great tool with many plugins to publish content on the Web. It aims to be simple to...
CMS Made Simple 1.12.1 2.1.3 - Web Server Cache Poisoning
CMS Made Simple 1.12.1 2.1.3 - Web Server Cache Poisoning ============================================= Web Server Cache Poisoning in CMS Made Simple ============================================= CVE-2016-2784 Product Description =================== CMS Made Simple is a great tool with many plugi...
CMS Made Simple Cache Poisoning
============================================= Web Server Cache Poisoning in CMS Made Simple ============================================= CVE-2016-2784 Product Description =================== CMS Made Simple is a great tool with many plugins to publish content on the Web. It aims to be simple to...
CMS Made Simple PHP Code Injection Vulnerability (All versions)
CMS Made Simple PHP Code Injection Vulnerability All versions 2014-12-02 SAHM @post.com cmsmadesimple.org All versions ---exploit A malicious attacker can intrude every CMSMS-installed website by taking the following steps: Open the /install folder from the URL The cms doesn't force users to dele...
CMS Made Simple Install SQL Injection Command Execution
CMS Made Simple PHP Code Injection Vulnerability All versions 2014-12-02 SAHM @post.com cmsmadesimple.org All versions ---exploit A malicious attacker can intrude every CMSMS-installed website by taking the following steps: Open the /install folder from the URL The cms doesn't force users to dele...