1250 matches found
CMS Made Simple 1.11.9 - Multiple Vulnerabilities
Vulnerabilities in CMS Made Simple, version 1.11.9 Discovered by Pedro Ribeiro [email protected] of Agile Information Security Reported to [email protected] and [email protected] Disclosure: 28/02/2014 / Last updated: 12/10/2014 CMS Made Simple, an open source content management...
CMS Made Simple 1.11.9 - Multiple Vulnerabilities
CMS Made Simple 1.11.9 - Multiple Vulnerabilities Vulnerabilities in CMS Made Simple, version 1.11.9 Discovered by Pedro Ribeiro [email protected] of Agile Information Security Reported to [email protected] and [email protected] Disclosure: 28/02/2014 / Last updated: 12/10/2014 CMS...
CMS Made Simple 0.10 Index.PHP Cross-Site Scripting Vulnerability
No description provided by source...
CMS Made Simple 0.10 Lang.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14709/info CMS Made Simple is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may exploit this issue to execute arbitra...
CMS Made Simple 1.11.10 - Multiple XSS Vulnerabilities
No description provided by source. Exploit Title : CMS Made Simple 1.11.10 Multiple XSS Vulnerability Google dork : N/A Date : 02/04/2014 Exploit Author : Blessen Thomas Vendor Homepage : http://www.cmsmadesimple.org/ Software Link : N/A Version : 1.11.10 Tested on : Windows 7 hosted in WAMP serv...
CMS Made Simple 1.2 - Remote Code Execution Vulnerability
No description provided by source. o bug /. . . . .-' -...-'/ o o , . o -...--.\ vuln.: CMS Made Simple 1.1.2 Remote Code Execution Vulnerability author: [email protected] download: http://dev.cmsmadesimple.org/frs/download.php/1424/cmsmadesimple-1.1.2.zip dork: powered by CMS Made Simple version...
CMS Made Simple <= 1.2.2 - (TinyMCE module) SQL Injection Vuln
No description provided by source. ------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX mail.....:...
cms made simple 1.6.6 - Multiple Vulnerabilities
No description provided by source. . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ \ / / // \ / \ |/| || \\ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com Greetz to all Darkc0de ,AI,ICW, AH Memebers Shoutz to...
CMS Made Simple 1.4.1 - Local File Inclusion Vulnerability
No description provided by source. Type: Directory Traversal vulnerability Unix tested / Root privileges escalation Vendor: CMS Made Simple Software: CMS Made Simple 1.4.1 Spring Garden and probably others ... Author: M4ck-h@cK Date 29.11.2008 Home: sweet home contact: no, thx : Exploit: Demo: on...
CMS Made Simple <= 1.6.2 - Local File Disclosure Vulnerability
No description provided by source. CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: This site is powered by CMS Made Simple version 1. Site: http://www.cmsmadesimple.org/ Download:...
CMS Made Simple 105 Stylesheet.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23753/info CMS Made Simple is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...
CMS Made Simple 1.11.10 - Multiple Cross-Site Scripting Vulnerabilities
CMS Made Simple 1.11.10 - Multiple Cross-Site Scripting Vulnerabilities Exploit Title : CMS Made Simple 1.11.10 Multiple XSS Vulnerability Google dork : N/A Date : 02/04/2014 Exploit Author : Blessen Thomas Vendor Homepage : http://www.cmsmadesimple.org/ Software Link : N/A Version : 1.11.10 Test...
CMS Made Simple 1.11.10 - Multiple Cross-Site Scripting Vulnerabilities
Exploit Title : CMS Made Simple 1.11.10 Multiple XSS Vulnerability Google dork : N/A Date : 02/04/2014 Exploit Author : Blessen Thomas Vendor Homepage : http://www.cmsmadesimple.org/ Software Link : N/A Version : 1.11.10 Tested on : Windows 7 hosted in WAMP server Type of Application : open sourc...
CMS Made Simple < 1.11.13 Multiple XSS Vulnerabilities (Mar 2014) - Active Check
CMS Made Simple is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2014-2245
SQL injection vulnerability in the News module in CMS Made Simple CMSMS before 1.11.10 allows remote authenticated users with the "Modify News" permission to execute arbitrary SQL commands via the sortby parameter to admin/moduleinterface.php. NOTE: some of these details are obtained from third...
Sql injection
SQL injection vulnerability in the News module in CMS Made Simple CMSMS before 1.11.10 allows remote authenticated users with the "Modify News" permission to execute arbitrary SQL commands via the sortby parameter to admin/moduleinterface.php. NOTE: some of these details are obtained from third...
CVE-2014-2245
SQL injection vulnerability in the News module in CMS Made Simple CMSMS before 1.11.10 allows remote authenticated users with the "Modify News" permission to execute arbitrary SQL commands via the sortby parameter to admin/moduleinterface.php. NOTE: some of these details are obtained from third...
CVE-2014-2245
The CVE-2014-2245 entry concerns a SQL injection in the News module of CMS Made Simple (CMSMS). The vulnerability affects CMSMS prior to version 1.11.10 and can be triggered by remote authenticated users who hold the Modify News permission, via the sortby parameter to admin/moduleinterface.php. T...
CMS Made Simple跨站脚本和HTML注入漏洞
Bugtraq ID:65898 CVE ID:CVE-2014-0334 CMS Made Simple是一款内容管理系统。 CMS Made Simple多个脚本不正确处理多个输入参数，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 CMS Made Simple 目前没有详细解决方案提供： http://www.cmsmadesimple.org/...
CVE-2014-2092
Cross-site scripting XSS vulnerability in lib/filemanager/ImageManager/editorFrame.php in CMS Made Simple 1.11.10 allows remote attackers to inject arbitrary web script or HTML via the action parameter, a different issue than CVE-2014-0334. NOTE: the original disclosure also reported issues that...