CMS Made Simple 1.10.3 Cross Site Scripting

+---------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : CMS Made Simple alertdocument.cookie +--------...

CMS Made Simple <= 1.10.3 XSS Vulnerability

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : CMS Made Simple = 1.10.3 XSS Vulnerability Date : 02-04-2012 Author : Ivano Binetti...

CMS Made Simple File Upload

File upload uploadview.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

CMS Made Simple 1.8 LFI

Local file inclusion lib/translation.functions.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Why US Aircrafts Drop Spy Devices in Syrian ?

Why US Aircrafts Drop Spy Devices in Syrian ? Last week Iranian engineer claim to hijack U.S. drone by hacking GPS system using GPS spoofing. On December 14, residents of a small town in northern Syria reported seeing unidentified aircraft circling overhead, and dropping several small items...

CMS Made Simple Remote Database Corruption Vulnerability

CMS Made Simple is prone to a vulnerability that could result in the corruption of the database. An attacker can exploit this vulnerability to corrupt the database. Versions prior to CMS Made Simple 1.9.4.3 are vulnerable. OpenVAS Vulnerability Test $Id: gbcmsmadesimple50659.nasl 7024 2017-08-30...

CMS Made Simple < 1.9.4.3 Remote Database Corruption Vulnerability

CMS Made Simple is prone to a vulnerability that could result in the corruption of the database. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

CVE-2011-3718

CMS Made Simple CMSMS 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/TinyMCE/TinyMCE.module.php and certain other files. NOTE: this might overlap CVE-2007-5444...

Information disclosure

CMS Made Simple CMSMS 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/TinyMCE/TinyMCE.module.php and certain other files. NOTE: this might overlap CVE-2007-5444...

CVE-2011-3718

CMS Made Simple (CMSMS) 1.9.2 is affected by CVE-2011-3718. A remote attacker can obtain sensitive information by directly requesting a PHP file (e.g., modules/TinyMCE/TinyMCE.module.php), resulting in an error message that reveals the installation path. The vulnerability is an information-disclo...

CVE-2011-3718

CMS Made Simple CMSMS 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/TinyMCE/TinyMCE.module.php and certain other files. NOTE: this might overlap CVE-2007-5444...

CVE-2011-3718: Exposure of Sensitive Information to an Unauthorized Actor

CMS Made Simple CMSMS 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/TinyMCE/TinyMCE.module.php and certain other files. NOTE: this might overlap CVE-2007-5444...

CVE-2010-4663

Unspecified vulnerability in the News module in CMS Made Simple CMSMS before 1.9.1 has unknown impact and attack vectors...

Code injection

Unspecified vulnerability in the News module in CMS Made Simple CMSMS before 1.9.1 has unknown impact and attack vectors...

CVE-2010-4663

Unspecified vulnerability in the News module in CMS Made Simple CMSMS before 1.9.1 has unknown impact and attack vectors...

CVE-2010-4663

Technical details for CVE-2010-4663 are not publicly available in the provided documents. Monitor for updates from trusted sources.

CVE-2010-4663: Undefined Security Weakness

Unspecified vulnerability in the News module in CMS Made Simple CMSMS before 1.9.1 has unknown impact and attack vectors...

World e Mart (news event page) SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CMS Made Simple <= 1.9.4.1 Arbitrary Remote File Upload

Exploit for php platform in category web applications !/usr/bin/perl sub logo print STDERR Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KedAns-Dz member from Inj3ct0r Team 1 1 0...

FBI raids ISP in Anonymous DDoS investigation !

Authorities in the U.S. and Germany have raided Internet Service Providers in hopes of tracking down the hackers who launched distributed denial of service DDoS attacks against Web sites such as Visa.com, PayPal.com, and Mastercard.com earlier this month. In documents posted Wednesday to the...