CMS Made Simple 1.4.1 Local File Inclusion Vulnerability

No description provided by source. Type: Directory Traversal vulnerability Unix tested / Root privileges escalation Vendor: CMS Made Simple Software: CMS Made Simple 1.4.1 "Spring Garden" and probably others ... Author: M4ck-h@cK Date 29.11.2008 Home: sweet home contact: no, thx : Exploit: Demo: ...

cmsmadesimple-lfi.txt

Type: Directory Traversal vulnerability Unix tested / Root privileges escalation Vendor: CMS Made Simple Software: CMS Made Simple 1.4.1 "Spring Garden" and probably others ... Author: M4ck-h@cK Date 29.11.2008 Home: sweet home contact: no, thx : Exploit: Demo: on...

CMS Made Simple 1.4.1 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== CMS Made Simple 1.4.1 Local File Inclusion Vulnerability ======================================================== Type: Directory Traversal vulnerability Unix tested / Root privilege...

CMS Made Simple 1.4.1 - Local File Inclusion

CMS Made Simple 1.4.1 - Local File Inclusion Type: Directory Traversal vulnerability Unix tested / Root privileges escalation Vendor: CMS Made Simple Software: CMS Made Simple 1.4.1 "Spring Garden" and probably others ... Author: M4ck-h@cK Date 29.11.2008 Home: sweet home contact: no, thx :...

CMS Made Simple 1.4.1 - Local File Inclusion

Type: Directory Traversal vulnerability Unix tested / Root privileges escalation Vendor: CMS Made Simple Software: CMS Made Simple 1.4.1 "Spring Garden" and probably others ... Author: M4ck-h@cK Date 29.11.2008 Home: sweet home contact: no, thx : Exploit: Demo: on...

CVE-2008-3926

Multiple directory traversal vulnerabilities in Content Management Made Easy CMME 1.12 allow remote attackers to 1 read arbitrary files via a .. dot dot in the env parameter in a weblog action to index.php, or 2 create arbitrary directories via a .. dot dot in the env parameter in a login action ...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin.php in Content Management Made Easy CMME 1.12 allows remote attackers to trigger the logout of an administrative user via a logout action...

Directory traversal

Multiple directory traversal vulnerabilities in Content Management Made Easy CMME 1.12 allow remote attackers to 1 read arbitrary files via a .. dot dot in the env parameter in a weblog action to index.php, or 2 create arbitrary directories via a .. dot dot in the env parameter in a login action ...

Improper access control

The "Make a backup" functionality in Content Management Made Easy CMME 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover 1 account names and 2 password hashes via a direct request for a backup/cmmedata.zip or b...

CVE-2008-3925

Cross-site request forgery CSRF vulnerability in admin.php in Content Management Made Easy CMME 1.12 allows remote attackers to trigger the logout of an administrative user via a logout action...

CVE-2008-3924

Content Management Made Easy (CMME) 1.12 exposes sensitive data under the web root via its Make a backup feature, allowing remote attackers to directly request backup/cmme_data.zip or backup/cmme_cmme.zip to discover account names and password hashes. Vector a reportedly also affects CMME 1.19. T...

CVE-2008-3926: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Content Management Made Easy CMME 1.12 allow remote attackers to 1 read arbitrary files via a .. dot dot in the env parameter in a weblog action to index.php, or 2 create arbitrary directories via a .. dot dot in the env parameter in a login action ...

CVE-2008-3923: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in statistics.php in Content Management Made Easy CMME 1.12 allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 year parameters in an hstatyear action...

CVE-2008-3925: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in admin.php in Content Management Made Easy CMME 1.12 allows remote attackers to trigger the logout of an administrative user via a logout action...

CVE-2008-3924: Undefined Security Weakness

The "Make a backup" functionality in Content Management Made Easy CMME 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover 1 account names and 2 password hashes via a direct request for a backup/cmmedata.zip or b...

CVE-2008-2267

Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in 1 .jsp, 2 .php3, 3 .cgi, 4 .dhtml, 5 .phtml, 6 .php5, or 7 .jar, then accessin...

Design/Logic Flaw

Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in 1 .jsp, 2 .php3, 3 .cgi, 4 .dhtml, 5 .phtml, 6 .php5, or 7 .jar, then accessin...

EUVD-2008-2264

Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in 1 .jsp, 2 .php3, 3 .cgi, 4 .dhtml, 5 .phtml, 6 .php5, or 7 .jar, then accessin...

CVE-2008-2267

The CVE-2008-2267 entry concerns CMS Made Simple (CMSMS) 1.2.4 and earlier, where the FileManager module’s Postlet component (javaUpload.php) uses an incomplete blacklist. This allows remote attackers to upload a file whose name ends with extensions such as .jsp, .php3, .cgi, .dhtml, .phtml, .php...

CVE-2008-2267

Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in 1 .jsp, 2 .php3, 3 .cgi, 4 .dhtml, 5 .phtml, 6 .php5, or 7 .jar, then accessin...