CVE-2007-5442

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors...

Design/Logic Flaw

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors...

Path traversal

CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CMS Made Simple 1.1.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 the anchor tag and 2 listtags...

CVE-2007-5443

Multiple cross-site scripting XSS vulnerabilities in CMS Made Simple 1.1.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 the anchor tag and 2 listtags...

CVE-2007-5441

CMS Made Simple 1.1.3.1 is affected by a permission-check bypass vulnerability. Remote authenticated users can perform some administrative actions, e.g., adding a user via admin/adduser.php and reading adminlog.php?page=1. Root cause: incomplete permission validation in certain request paths. No ...

CVE-2007-5443

CVE-2007-5443 describes multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.1.3.1. The description specifies remote attackers can inject arbitrary script or HTML via vectors related to (1) the anchor tag and (2) listtags, but the exact technical vectors are not detailed in th...

CVE-2007-5444

CMS Made Simple 1.1.3.1 is vulnerable to a path-disclosure issue: remote attackers can obtain the server’s full path by directly requesting unspecified files. This is a remote, unauthenticated weakness with partial confidentiality impact. No explicit fix/version is stated in the provided document...

CVE-2007-5442

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors...

CVE-2007-5444

CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files...

CVE-2007-5441

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by 1 adding a user via a direct request to admin/adduser.php and 2 reading the admin log via an...

CVE-2007-5442

CVE-2007-5442 affects CMS Made Simple 1.1.3.1. The vulnerability is that the system does not check the permissions of users attempting uploads, allowing remote authenticated users to upload unspecified files via unknown vectors. The public description does not specify affected files, exploit meth...

CVE-2007-5443

Multiple cross-site scripting XSS vulnerabilities in CMS Made Simple 1.1.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 the anchor tag and 2 listtags...

Several vulnerabilities in CMS Made Simple 1.1.3.1

Hi, There are several security bugs in CMS Made Simple 1.1.3.1 : I am not going to release dangerous and exploitable info here 1 There is a highly dangerous PHP code execution bug in the script . 2 A registered user can access unauthorized pages . For example he can upload files to the server, or...

cmsmade-exec.txt

o bug /". . . . .-' -...-'/ o o , . o -...--".\ vuln.: CMS Made Simple 1.1.2 Remote Code Execution Vulnerability author: [email protected] download: http://dev.cmsmadesimple.org/frs/download.php/1424/cmsmadesimple-1.1.2.zip dork: "powered by CMS Made Simple version 1.1.2" greetz: cOndemned, kacper,...

Immunity Canvas: CMSMADESIMPLE_EVAL

Name| cmsmadesimpleeval ---|--- CVE| CVE-2007-5056 Exploit Pack| CANVAS Description| CMS Made Simple Eval Notes| CVE Name: CVE-2007-5056 VENDOR: cms made simple Notes: Try using nc -e /bin/sh as your command and having a nc -vlp Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2007-50...

CMS Made Simple 1.2 Remote Code Execution Vulnerability

No description provided by source. o bug /". . . . .-' -...-'/ o o , . o -...--".\ ...

CMS Made Simple 1.2 - Remote Code Execution

CMS Made Simple 1.2 - Remote Code Execution o bug /". . . . .-' -...-'/ o o , . o -...--".\ vuln.: CMS Made Simple 1.1.2 Remote Code Execution Vulnerability author: [email protected] download: http://dev.cmsmadesimple.org/frs/download.php/1424/cmsmadesimple-1.1.2.zip dork: "powered by CMS Made Simpl...

CMS Made Simple 1.2 Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ======================================================= CMS Made Simple 1.2 Remote Code Execution Vulnerability ======================================================= o bug /". . . . .-' -...-'/ o o , . o -...--".\ vuln.: CMS Made Simple...

CMS Made Simple 1.2 - Remote Code Execution

o bug /". . . . .-' -...-'/ o o , . o -...--".\ vuln.: CMS Made Simple 1.1.2 Remote Code Execution Vulnerability author: [email protected] download: http://dev.cmsmadesimple.org/frs/download.php/1424/cmsmadesimple-1.1.2.zip dork: "powered by CMS Made Simple version 1.1.2" greetz: cOndemned, kacper,...