Cross site scripting

Cross-site scripting XSS vulnerability in admin/editprefs.php in the backend in CMS Made Simple CMSMS before 1.7.1 might allow remote attackers to inject arbitrary web script or HTML via the dateformatstring parameter...

CVE-2010-1482

CVE-2010-1482 affects CMS Made Simple (CMSMS) prior to version 1.7.1. The vulnerability is a cross-site scripting (XSS) flaw in the backend’s admin/editprefs.php, exploitable via the date_format_string parameter. The issue arises from insufficient escaping of user-supplied input, enabling an atta...

CVE-2010-1482

Cross-site scripting XSS vulnerability in admin/editprefs.php in the backend in CMS Made Simple CMSMS before 1.7.1 might allow remote attackers to inject arbitrary web script or HTML via the dateformatstring parameter...

CVE-2010-1482: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/editprefs.php in the backend in CMS Made Simple CMSMS before 1.7.1 might allow remote attackers to inject arbitrary web script or HTML via the dateformatstring parameter...

CMS Made Simple: backend cross site scripting (XSS), CVE-2010-1482

CMS Made Simple: backend cross site scripting XSS, CVE-2010-1482 References https://vulners.com/cve/CVE-2010-1482 http://int21.de/cve/CVE-2010-1482-cmsmadesimple-xss-backend.html http://blog.cmsmadesimple.org/2010/05/01/announcing-cms-made-simple-1-7-1-escade/ Description CMS Made Simple 1.7.0 an...

CMS Made Simple 'admin/editprefs.php' Cross-Site Scripting Vulnerability

CMS Made Simple is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help t...

CMS Made Simple Cross Site Scripting

CMS Made Simple: backend cross site scripting XSS, CVE-2010-1482 References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1482 http://int21.de/cve/CVE-2010-1482-cmsmadesimple-xss-backend.html http://blog.cmsmadesimple.org/2010/05/01/announcing-cms-made-simple-1-7-1-escade/ Description CM...

CMS Made Simple < 1.7.1 Cross-Site Scripting Vulnerability

Binary data 5530.prm...

CMS Made Simple 1.7 CSRF Vulnerability

No description provided by source. Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul Agrawal Software CMS Made Simple 1.7 Category CMS / Portals Site p4ge http://server/demo/2/10/CMSMadeSimple Plateform php Greetz to Gaurav, Prateek, Vivek, Sanja...

CMS Made Simple 1.7 - Cross-Site Request Forgery

CMS Made Simple 1.7 - Cross-Site Request Forgery ======================================================================= CMS Made Simple 1.7 CSRF Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected]...

CMS Made Simple 1.7 - Cross-Site Request Forgery

======================================================================= CMS Made Simple 1.7 CSRF Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul Agrawal...

Discloser 'more' Parameter SQL Injection Vulnerability

The host is running Discloser and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddisclosersqlinjvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Discloser 'more' Parameter SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

CMS Made Simple Local File Include and Cross Site Scripting Vulnerabilities

CMS Made Simple is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within...

CMS Made Simple Detection (HTTP)

HTTP based detection of CMS Made Simple. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100497";...

CMS Made Simple <= 1.6.6 LFI and XSS Vulnerabilities

CMS Made Simple is prone to a local file include LFI vulnerability and a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CMS Made Simple 1.6.6 - Multiple Vulnerabilities

CMS Made Simple 1.6.6 - Multiple Vulnerabilities . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com Greetz to all Darkc0de ,AI,ICW, AH Memebers Shoutz to...

CMS Made Simple 1.6.6 - Local File Inclusion Cross-Site Scripting

CMS Made Simple 1.6.6 - Local File Inclusion Cross-Site Scripting source: https://www.securityfocus.com/bid/38234/info CMS Made Simple is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can...

CMS Made Simple 1.6.6 - Local File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/38234/info CMS Made Simple is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using...

CMS Made Simple 1.6.6 - Multiple Vulnerabilities

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com Greetz to all Darkc0de ,AI,ICW, AH Memebers Shoutz to r45c4l,j4ckh4x0r,silic0n,smith,baltazar,d3hydr8,FB1H2S, lowlz,Eberly,Sumit,...

CMS Made Simple 1.x - Cross-Site Scripting / Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/40483/info CMS Made Simple is prone to multiple cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied inputs. The application is also prone to a cross-site request-forgery vulnerability. An attacker may...