[Full-disclosure] CMS Made Simple: SQL injection

1 Summary Affected software CMS Made Simple 1.05 Vendor URL http://www.cmsmadesimple.org/ Severity High 2 Vulnerability Description The affected software is vulnerable to SQL injection via the templateid parameter of the stylesheet.php page the value of this parameter is used directly in an SQL...

CMSmadesimple-sql.txt

1 Summary Affected software CMS Made Simple 1.05 Vendor URL http://www.cmsmadesimple.org/ Severity High 2 Vulnerability Description The affected software is vulnerable to SQL injection via the templateid parameter of the stylesheet.php page the value of this parameter is used directly in an SQL...

Sql injection

SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...

CVE-2007-2473

SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...

CVE-2007-2473

CVE-2007-2473 describes an SQL injection in the stylesheet.php file of CMS Made Simple, affecting version 1.0.5 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying a crafted value for the templateid parameter. The available connected documents con...

CVE-2007-2473

SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...

CMS Made Simple 1.0.5 - Stylesheet.php SQL Injection

CMS Made Simple 1.0.5 - Stylesheet.php SQL Injection source: https://www.securityfocus.com/bid/23753/info CMS Made Simple is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

CMS Made Simple 1.0.5 - 'Stylesheet.php' SQL Injection

source: https://www.securityfocus.com/bid/23753/info CMS Made Simple is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

CMS Made Simple non-permanent XSS

/|| | || / || / || || || / || || | || |/| || / ||| ||| |||/ http://www.nanoy.org Hacker.: NanoyMaster CMS....: CMS Made Simple Version: 1.0.2 --------exploits---------- 1 Search XSS non-permanent 2 preview XSS non-permanent 3 Admin login XSS non-permanent 4 Outro --------------------NM--...

CMS Made Simple non-permanent XSS

/|| | || / || / || || || / || || | || |/| || / ||| ||| |||/ http://www.nanoy.org Hacker.: NanoyMaster CMS....: CMS Made Simple Version: 1.0.2 --------exploits---------- 1 Search XSS non-permanent 2 preview XSS non-permanent 3 Admin login XSS non-permanent 4 Outro --------------------NM--...

CVE-2006-6845

CVE-2006-6845 : CMS Made Simple 1.0.2 has a Cross-site scripting (XSS) vulnerability in index.php via the cntnt01searchinput parameter in a Search action, allowing remote attackers to inject arbitrary web script or HTML. The provided documents do not include remediation steps or fixed versions.

CVE-2006-6844

Cross-site scripting XSS vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form...

CVE-2006-6844

CVE-2006-6844 : XSS vulnerability in the optional user comment module of CMS Made Simple 1.0.2. An attacker can inject arbitrary JavaScript/HTML via the user comment form, potentially affecting other users who view the comments. Metrics indicate a medium severity (CVSSv2 base score 6.8) with netw...

CVE-2006-6845

Cross-site scripting XSS vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the cntnt01searchinput parameter in a Search action...

CVE-2006-6844

Cross-site scripting XSS vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form...

XSS - CMS Made Simple v1.0.2

Product: CMS Made Simple v1.0.2 Class: XSS Website: http://www.cmsmadesimple.org Found by: L0j1k of D.I.E. Inc. Googledork: "powered by cms made simple" -=-=-=-=- - Summary: Optional user comment module not properly sanitized for script tags. -=-=-=-=- - PoC: Input the following into user comment...

CMS Made Simple 1.0.2 - SearchInput Cross-Site Scripting

CMS Made Simple 1.0.2 - SearchInput Cross-Site Scripting source: https://www.securityfocus.com/bid/21527/info CMS Made Simple is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

CMS Made Simple 1.0.2 - 'SearchInput' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21527/info CMS Made Simple is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting...

CVE-2005-3083

Cross-site scripting XSS vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2005-3083

CMS Made Simple 0.10 contains a cross-site scripting (XSS) vulnerability in index.php via the page parameter. Root cause is improper handling of the page parameter leading to script/HTML injection; impact implied is partial integrity compromise. CVSS 2.0 base score: 4.3 (Medium); vector: AV:N/AC:...