1783 matches found
CMS Made Simple <= 1.6.2 Local File Disclosure Vulnerability
No description provided by source. CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download:...
CMS Made Simple url Parameter Arbitrary File Access
The remote web server is hosting CMS Made Simple, a content management system written in PHP. The version of CMS Made Simple installed on the remote host fails to sanitize user-supplied input to 'url' parameter in script 'modules/Printing/output.php' before using it to display the contents of a...
CMS Made Simple < 1.6.3 Local File Include Vulnerability
Binary data 5123.prm...
CMS Made Simple 1.6.2 - Local File Disclosure
CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download: http://s3.amazonaws.com/cmsms/downloads/4033/cmsmadesimple-1.6.2-full.tar.gz Vulnerability:...
CMS Made Simple 1.6.2 File Disclosure
CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download: http://s3.amazonaws.com/cmsms/downloads/4033/cmsmadesimple-1.6.2-full.tar.gz Vulnerability:...
CMS Made Simple 1.6.2 - Local File Disclosure
CMS Made Simple 1.6.2 - Local File Disclosure CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download:...
CMS Made Simple <= 1.6.2 Local File Disclosure Vulnerability
Exploit for unknown platform in category web applications ============================================================ CMS Made Simple = 1.6.2 Local File Disclosure Vulnerability ============================================================ CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009...
Cross site scripting
Cross-site scripting XSS vulnerability in admin.php aka the login page in Content Management Made Easy CMME before 1.22 allows remote attackers to inject arbitrary web script or HTML via the username field...
CVE-2009-2342
CVE-2009-2342 is an XSS in Content Management Made Easy (CMME) prior to 1.22, affecting admin.php (the login page). The vulnerability allows remote attackers to inject arbitrary scripts via the username field in the login form. Documents consistently describe the flaw as a cross-site scripting is...
CVE-2009-2342: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin.php aka the login page in Content Management Made Easy CMME before 1.22 allows remote attackers to inject arbitrary web script or HTML via the username field...
Information disclosure
Content Management Made Easy CMME 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function...
CVE-2008-6159
Content Management Made Easy (CMME) 1.19 is affected by an information disclosure vulnerability where a direct request to info.php invokes phpinfo, allowing remote attackers to obtain system information. The flaw is triggered by accessing the info.php entry point, and the underlying cause is the ...
CVE-2008-6159: Exposure of Sensitive Information to an Unauthorized Actor
Content Management Made Easy CMME 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function...
Directory traversal
Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. dot dot in a cmslanguage cookie...
CVE-2008-5642
Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. dot dot in a cmslanguage cookie...
CVE-2008-5642
CMS Made Simple 1.4.1 is affected by a directory traversal in admin/login.php, exploitable via a crafted cms_language cookie to read arbitrary server files. Root cause: improper validation of the cms_language cookie enabling path traversal. Exploitation details are not provided beyond the basic v...
CVE-2008-5642
Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. dot dot in a cmslanguage cookie...
CVE-2008-5642: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in admin/login.php in CMS Made Simple 1.4.1 allows remote attackers to read arbitrary files via a .. dot dot in a cmslanguage cookie...
CMS Made Simple admin/login.php cms_language Cookie Local File Inclusion
The remote host is running CMS Made Simple, a content management system written in PHP. The version of CMS Made Simple installed on the remote host fails to sanitize user-supplied input to the 'cmslanguage' cookie when passed to the 'admin/login.php' script before using it to include PHP code...