CVE-2010-3882

CMS Made Simple 1.7.1 and earlier are affected by multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script or HTML via inputs to modules including Add Pages, Add Global Content, Edit Global Content, Add Article, Add Category, Add Field Definition, or Add Shortcut. The c...

CVE-2010-2797

Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the defaultcmslang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different...

CVE-2010-3884

The CVE-2010-3884 entry applies to CMS Made Simple 1.8.1 and earlier, describing a Cross-site Request Forgery (CSRF) that could allow an attacker to hijack an administrator’s session to reset the administrative password. The connected records confirm the vulnerable component and the general impac...

CVE-2010-2797

CMS Made Simple

CVE-2010-3884

Cross-site request forgery CSRF vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that reset the administrative password. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CMS Made Simple 1.6.2 LFI Vulnerability - Active Check

CMS Made Simple is prone to a local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CMS Made Simple 'modules/Printing/output.php' Local File Include Vulnerability

This host is running CMS Made Simple and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: secpodcmsmadesimplelfivuln.nasl 5394 2017-02-22 09:22:42Z teissa $ CMS Made Simple 'modules/Printing/output.php' Local File Include Vulnerability Authors: Sooraj KS Copyright:...

CMS Made Simple < 1.8.1 Parameter LFI Vulnerability - Active Check

CMS Made Simple is prone to a local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CMS Made Simple < 1.8.1 Local File Include Vulnerability

Binary data 5598.prm...

CMS Made Simple 1.8 Antz Toolkit 1.02 Module Shell Upload

------------------------------------------------------------------------ Software................CMS Made Simple 1.8 Antz Toolkit 1.02 Module Vulnerability...........Arbitrary Upload Download................http://code.google.com/p/antz-cmsms/ Release Date............7/11/2010 Tested...

CMS Made Simple 1.8 Local File Inclusion

------------------------------------------------------------------------ Software................CMS Made Simple 1.8 Vulnerability...........Local File Inclusion Download................http://www.cmsmadesimple.org/ Release Date............7/11/2010 Tested On...............Windows Vista + XAMPP...

CMS Made Simple 1.8 Download Manager 1.4.1 Module Shell Upload

------------------------------------------------------------------------ Software................CMS Made Simple 1.8 Download Manager 1.4.1 Module Vulnerability...........Arbitrary Upload Download................http://dev.cmsmadesimple.org/projects/downloadmanager Release Date............7/11/20...

CMS Made Simple 1.8 - default_cms_lang Local File Inclusion

CMS Made Simple 1.8 - defaultcmslang Local File Inclusion source: https://www.securityfocus.com/bid/41565/info CMS Made Simple is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially...

CMS Made Simple 1.8 - 'default_cms_lang' Local File Inclusion

source: https://www.securityfocus.com/bid/41565/info CMS Made Simple is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts...

CMS Made Simple Module Antz Toolkit 1.02 - Arbitrary File Upload

CMS Made Simple Module Antz Toolkit 1.02 - Arbitrary File Upload source: https://www.securityfocus.com/bid/41569/info The Antz toolkit module for CMS Made Simple is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-suppli...

CMS Made Simple Module Antz Toolkit 1.02 - Arbitrary File Upload

source: https://www.securityfocus.com/bid/41569/info The Antz toolkit module for CMS Made Simple is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload...

CMS Made Simple Module Download Manager 1.4.1 - Arbitrary File Upload

source: https://www.securityfocus.com/bid/41564/info The Download Manager module for CMS Made Simple is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to uploa...

CMS Made Simple Module Download Manager 1.4.1 - Arbitrary File Upload

CMS Made Simple Module Download Manager 1.4.1 - Arbitrary File Upload source: https://www.securityfocus.com/bid/41564/info The Download Manager module for CMS Made Simple is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize...

[Bkis-02-2010] Multiple Vulnerabilities in CMS Made Simple - Bkis

Bkis-02-2010 Multiple Vulnerabilities in CMS Made Simple 1. General information CMS Made Simple is a free content management system CMS written in PHP, available at www.cmsmadesimple.org. In March, 2010, Bkis Security discovered some XSS and CSRF vulnerabilities in CMS Made Simple 1.7.1. Taking...

CVE-2010-1482

Cross-site scripting XSS vulnerability in admin/editprefs.php in the backend in CMS Made Simple CMSMS before 1.7.1 might allow remote attackers to inject arbitrary web script or HTML via the dateformatstring parameter...