CVE-2005-2846

CMS Made Simple

CVE-2005-2846

PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nlsfilevxvxsfx parameter...

CVE-2005-2846: Undefined Security Weakness

PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nlsfilevxvxsfx parameter...

CMS Made Simple <= 0.10 - PHP injection

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: CMS Made Simple - PHP injection Version = 0.10 Homepage: http://www.cmsmadesimple.org/ Author: Filip Groszynski VXSfx Date: 31 August 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Background: CMS Made Simple is an easy...

CMS010.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: CMS Made Simple - PHP injection Version -------------------------------------------------------- Exploit: example.html: inpu...

CMS Made Simple admin/lang.php nls Parameter Remote File Inclusion

The remote host appears to be running CMS Made Simple, a content management system written in PHP. The version of CMS Made Simple installed on the remote host fails to properly sanitize user-supplied input to the 'nls' parameter of the 'admin/lang.php' script before using it to include PHP code. ...

CMS Made Simple 0.10 - 'Lang.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/14709/info CMS Made Simple is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may exploit this issue to execute arbitrary remote PHP code on an affected...

CMS Made Simple 0.10 - Lang.php Remote File Inclusion

CMS Made Simple 0.10 - Lang.php Remote File Inclusion source: https://www.securityfocus.com/bid/14709/info CMS Made Simple is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may exploit this issu...

CMSsimpleXSS.txt

CMS Made Simple is an open source project which uses the smarty template engine in various places. Its website is at http://cmsmadesimple.org while the smarty site is at http://smarty.php.net CMS Made Simple suffers from a Cross Site scripting XSS and path disclosure vulnerability;...