1783 matches found
CVE-2006-6845: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the cntnt01searchinput parameter in a Search action...
CVE-2006-6844: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form...
CVE-2006-6845
Cross-site scripting XSS vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the cntnt01searchinput parameter in a Search action...
CVE-2006-6844
Cross-site scripting XSS vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form...
XSS - CMS Made Simple v1.0.2
Product: CMS Made Simple v1.0.2 Class: XSS Website: http://www.cmsmadesimple.org Found by: L0j1k of D.I.E. Inc. Googledork: "powered by cms made simple" -=-=-=-=- - Summary: Optional user comment module not properly sanitized for script tags. -=-=-=-=- - PoC: Input the following into user comment...
CMS Made Simple 1.0.2 - SearchInput Cross-Site Scripting
CMS Made Simple 1.0.2 - SearchInput Cross-Site Scripting source: https://www.securityfocus.com/bid/21527/info CMS Made Simple is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...
CMS Made Simple 1.0.2 - 'SearchInput' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21527/info CMS Made Simple is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting...
E-Uploader Pro <= 1.0 Image Upload with Code Execution Vulnerability
Exploit for unknown platform in category web applications ==================================================================== E-Uploader Pro = 1.0 Image Upload with Code Execution Vulnerability ==================================================================== ::::::::: :::::::::: ::: :::...
Microsoft Internet Explorer 6.0.2900 SP2 - CSS Attribute Denial of Service
IE-Crash - By seven header position: fixed; height: 761px; width: 1268; milw0rm.com 2006-05-10...
CVE-2005-3083
Cross-site scripting XSS vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2005-3083
CMS Made Simple 0.10 contains a cross-site scripting (XSS) vulnerability in index.php via the page parameter. Root cause is improper handling of the page parameter leading to script/HTML injection; impact implied is partial integrity compromise. CVSS 2.0 base score: 4.3 (Medium); vector: AV:N/AC:...
CVE-2005-3083: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CMS Made Simple 0.10 - index.php Cross-Site Scripting
CMS Made Simple 0.10 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/14937/info CMS Made Simple is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...
cmsXSS.txt
Description: CMS lets you update your pages and keep the content on a static page that will not become stale regardless of how much other content gets placed on your site version:CMS Made Simple 0.10 vendor:http://www.cmsmadesimple.org Vulnerability: cross site script exploit:...
CVE-2005-2846
PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nlsfilevxvxsfx parameter...
CVE-2005-2846
CMS Made Simple
CVE-2005-2846: Undefined Security Weakness
PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nlsfilevxvxsfx parameter...
CMS Made Simple <= 0.10 - PHP injection
-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: CMS Made Simple - PHP injection Version = 0.10 Homepage: http://www.cmsmadesimple.org/ Author: Filip Groszynski VXSfx Date: 31 August 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Background: CMS Made Simple is an easy...
CMS010.txt
-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: CMS Made Simple - PHP injection Version -------------------------------------------------------- Exploit: example.html: inpu...
CMS Made Simple admin/lang.php nls Parameter Remote File Inclusion
The remote host appears to be running CMS Made Simple, a content management system written in PHP. The version of CMS Made Simple installed on the remote host fails to properly sanitize user-supplied input to the 'nls' parameter of the 'admin/lang.php' script before using it to include PHP code. ...