1250 matches found
CVE-2008-2267
Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in 1 .jsp, 2 .php3, 3 .cgi, 4 .dhtml, 5 .phtml, 6 .php5, or 7 .jar, then accessin...
CMS Made Simple 1.2.4 Module FileManager - Arbitrary File Upload
CMS Made Simple 1.2.4 Module FileManager - Arbitrary File Upload ?php / --------------------------------------------------------------------------- CMS Made Simple = 1.2.4 FileManager module Arbitrary File Upload Exploit ---------------------------------------------------------------------------...
CMS Made Simple 1.2.4 Module FileManager - Arbitrary File Upload
?php / --------------------------------------------------------------------------- CMS Made Simple = 1.2.4 FileManager module Arbitrary File Upload Exploit --------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
CMS Made Simple <= 1.2.4 (FileManager module) File Upload Exploit
Exploit for unknown platform in category web applications ================================================================= CMS Made Simple = 1.2.4 FileManager module File Upload Exploit ================================================================= ?php /...
cmsmadesimple-upload.txt
?php / --------------------------------------------------------------------------- CMS Made Simple = 1.2.4 FileManager module Arbitrary File Upload Exploit --------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
CVE-2007-6656
SQL injection vulnerability in contentcss.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...
Sql injection
SQL injection vulnerability in contentcss.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...
CVE-2007-6656
SQL injection vulnerability in contentcss.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...
CVE-2007-6656
The CVE-2007-6656 entry describes an SQL injection in CMS Made Simple's TinyMCE module, specifically in content_css.php, affecting CMS Made Simple 1.2.2 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the templateid parameter. The provided sources conf...
CVE-2007-6656
SQL injection vulnerability in contentcss.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...
CMS Made Simple content_css.php templateid Parameter SQL Injection
Binary data 4328.prm...
CMS Made Simple modules/TinyMCE/content_css.php templateid Parameter SQL Injection
The remote host appears to be running CMS Made Simple, a content management system written in PHP. The version of CMS Made Simple installed on the remote host fails to sanitize user-supplied input to the 'templateid' parameter of the 'modules/TinyMCE/contentcss.php' script before using it in a...
CMS Made Simple <= 1.2.2 (TinyMCE module) SQL Injection Vuln
No description provided by source. ------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX mail.....:...
CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection
------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection
CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection ------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX mail........
CMS Made Simple <= 1.2.2 (TinyMCE module) SQL Injection Vuln
Exploit for unknown platform in category web applications ============================================================ CMS Made Simple = 1.2.2 TinyMCE module SQL Injection Vuln ============================================================...
CMS Made Simple <= 1.2.2 (TinyMCE module) SQL Injection Vuln
No description provided by source. ------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX...
CVE-2007-5441
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by 1 adding a user via a direct request to admin/adduser.php and 2 reading the admin log via an...
Cross site request forgery (csrf)
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by 1 adding a user via a direct request to admin/adduser.php and 2 reading the admin log via an...