CMS Made Simple 1.0.5 - 'Stylesheet.php' SQL Injection

source: https://www.securityfocus.com/bid/23753/info CMS Made Simple is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

CMS Made Simple non-permanent XSS

/|| | || / || / || || || / || || | || |/| || / ||| ||| |||/ http://www.nanoy.org Hacker.: NanoyMaster CMS....: CMS Made Simple Version: 1.0.2 --------exploits---------- 1 Search XSS non-permanent 2 preview XSS non-permanent 3 Admin login XSS non-permanent 4 Outro --------------------NM--...

CMS Made Simple non-permanent XSS

/|| | || / || / || || || / || || | || |/| || / ||| ||| |||/ http://www.nanoy.org Hacker.: NanoyMaster CMS....: CMS Made Simple Version: 1.0.2 --------exploits---------- 1 Search XSS non-permanent 2 preview XSS non-permanent 3 Admin login XSS non-permanent 4 Outro --------------------NM--...

CVE-2006-6845

CVE-2006-6845 : CMS Made Simple 1.0.2 has a Cross-site scripting (XSS) vulnerability in index.php via the cntnt01searchinput parameter in a Search action, allowing remote attackers to inject arbitrary web script or HTML. The provided documents do not include remediation steps or fixed versions.

CVE-2006-6844

Cross-site scripting XSS vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form...

CVE-2006-6844

CVE-2006-6844 : XSS vulnerability in the optional user comment module of CMS Made Simple 1.0.2. An attacker can inject arbitrary JavaScript/HTML via the user comment form, potentially affecting other users who view the comments. Metrics indicate a medium severity (CVSSv2 base score 6.8) with netw...

CVE-2006-6845

Cross-site scripting XSS vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the cntnt01searchinput parameter in a Search action...

CVE-2006-6844

Cross-site scripting XSS vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form...

XSS - CMS Made Simple v1.0.2

Product: CMS Made Simple v1.0.2 Class: XSS Website: http://www.cmsmadesimple.org Found by: L0j1k of D.I.E. Inc. Googledork: "powered by cms made simple" -=-=-=-=- - Summary: Optional user comment module not properly sanitized for script tags. -=-=-=-=- - PoC: Input the following into user comment...

CMS Made Simple 1.0.2 - SearchInput Cross-Site Scripting

CMS Made Simple 1.0.2 - SearchInput Cross-Site Scripting source: https://www.securityfocus.com/bid/21527/info CMS Made Simple is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...

CMS Made Simple 1.0.2 - 'SearchInput' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21527/info CMS Made Simple is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting...

CVE-2005-3083

Cross-site scripting XSS vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2005-3083

CMS Made Simple 0.10 contains a cross-site scripting (XSS) vulnerability in index.php via the page parameter. Root cause is improper handling of the page parameter leading to script/HTML injection; impact implied is partial integrity compromise. CVSS 2.0 base score: 4.3 (Medium); vector: AV:N/AC:...

CMS Made Simple 0.10 - index.php Cross-Site Scripting

CMS Made Simple 0.10 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14937/info CMS Made Simple is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

cmsXSS.txt

Description: CMS lets you update your pages and keep the content on a static page that will not become stale regardless of how much other content gets placed on your site version:CMS Made Simple 0.10 vendor:http://www.cmsmadesimple.org Vulnerability: cross site script exploit:...

CVE-2005-2846

PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nlsfilevxvxsfx parameter...

CVE-2005-2846

CMS Made Simple

CMS Made Simple <= 0.10 - PHP injection

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: CMS Made Simple - PHP injection Version = 0.10 Homepage: http://www.cmsmadesimple.org/ Author: Filip Groszynski VXSfx Date: 31 August 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Background: CMS Made Simple is an easy...

CMS010.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: CMS Made Simple - PHP injection Version -------------------------------------------------------- Exploit: example.html: inpu...

CMS Made Simple admin/lang.php nls Parameter Remote File Inclusion

The remote host appears to be running CMS Made Simple, a content management system written in PHP. The version of CMS Made Simple installed on the remote host fails to properly sanitize user-supplied input to the 'nls' parameter of the 'admin/lang.php' script before using it to include PHP code. ...