Lucene search
+L

1905 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/10/14 12:00 a.m.•6 views

CVE-2007-5442: Undefined Security Weakness

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors...

3.5CVSS5.8AI score0.007EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2007/10/12 12:00 a.m.•41 views

Several vulnerabilities in CMS Made Simple 1.1.3.1

Hi, There are several security bugs in CMS Made Simple 1.1.3.1 : I am not going to release dangerous and exploitable info here 1 There is a highly dangerous PHP code execution bug in the script . 2 A registered user can access unauthorized pages . For example he can upload files to the server, or...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2007/09/25 12:00 a.m.•32 views

cmsmade-exec.txt

o bug /". . . . .-' -...-'/ o o , . o -...--".\ vuln.: CMS Made Simple 1.1.2 Remote Code Execution Vulnerability author: [email protected] download: http://dev.cmsmadesimple.org/frs/download.php/1424/cmsmadesimple-1.1.2.zip dork: "powered by CMS Made Simple version 1.1.2" greetz: cOndemned, kacper,...

7.4AI score
SaveExploits0
canvas
canvas
•added 2007/09/24 6:17 p.m.•50 views

Immunity Canvas: CMSMADESIMPLE_EVAL

Name| cmsmadesimpleeval ---|--- CVE| CVE-2007-5056 Exploit Pack| CANVAS Description| CMS Made Simple Eval Notes| CVE Name: CVE-2007-5056 VENDOR: cms made simple Notes: Try using nc -e /bin/sh as your command and having a nc -vlp Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2007-50...

6.8CVSS6.6AI score0.27871EPSS
SaveExploits9
seebug.org
seebug.org
•added 2007/09/22 12:00 a.m.•56 views

CMS Made Simple 1.2 Remote Code Execution Vulnerability

No description provided by source. o bug /". . . . .-' -...-'/ o o , . o -...--".\ ...

7.1AI score
SaveExploits0
zdt
zdt
•added 2007/09/21 12:00 a.m.•55 views

CMS Made Simple 1.2 Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ======================================================= CMS Made Simple 1.2 Remote Code Execution Vulnerability ======================================================= o bug /". . . . .-' -...-'/ o o , . o -...--".\ vuln.: CMS Made Simple...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/09/21 12:00 a.m.•89 views

CMS Made Simple 1.2 - Remote Code Execution

o bug /". . . . .-' -...-'/ o o , . o -...--".\ vuln.: CMS Made Simple 1.1.2 Remote Code Execution Vulnerability author: [email protected] download: http://dev.cmsmadesimple.org/frs/download.php/1424/cmsmadesimple-1.1.2.zip dork: "powered by CMS Made Simple version 1.1.2" greetz: cOndemned, kacper,...

6.8CVSS5.8AI score0.27871EPSS
SaveExploits9
exploitpack
exploitpack
•added 2007/09/21 12:00 a.m.•27 views

CMS Made Simple 1.2 - Remote Code Execution

CMS Made Simple 1.2 - Remote Code Execution o bug /". . . . .-' -...-'/ o o , . o -...--".\ vuln.: CMS Made Simple 1.1.2 Remote Code Execution Vulnerability author: [email protected] download: http://dev.cmsmadesimple.org/frs/download.php/1424/cmsmadesimple-1.1.2.zip dork: "powered by CMS Made Simpl...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2007/05/03 12:00 a.m.•50 views

CMSmadesimple-sql.txt

1 Summary Affected software CMS Made Simple 1.05 Vendor URL http://www.cmsmadesimple.org/ Severity High 2 Vulnerability Description The affected software is vulnerable to SQL injection via the templateid parameter of the stylesheet.php page the value of this parameter is used directly in an SQL...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2007/05/03 12:00 a.m.•56 views

[Full-disclosure] CMS Made Simple: SQL injection

1 Summary Affected software CMS Made Simple 1.05 Vendor URL http://www.cmsmadesimple.org/ Severity High 2 Vulnerability Description The affected software is vulnerable to SQL injection via the templateid parameter of the stylesheet.php page the value of this parameter is used directly in an SQL...

0.3AI score
SaveExploits0
Prion
Prion
•added 2007/05/02 11:19 p.m.•29 views

Sql injection

SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...

7.5CVSS9.1AI score0.03695EPSS
SaveExploits2References7Affected Software1
NVD
NVD
•added 2007/05/02 11:19 p.m.•29 views

CVE-2007-2473

SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...

7.5CVSS8.4AI score0.03695EPSS
SaveExploits2References7
CVE
CVE
•added 2007/05/02 11:00 p.m.•61 views

CVE-2007-2473

CVE-2007-2473 describes an SQL injection in the stylesheet.php file of CMS Made Simple, affecting version 1.0.5 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying a crafted value for the templateid parameter. The available connected documents con...

7.5CVSS8.4AI score0.03695EPSS
SaveExploits2References7Affected Software1
Cvelist
Cvelist
•added 2007/05/02 11:00 p.m.•52 views

CVE-2007-2473

SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...

8.4AI score0.03695EPSS
SaveExploits2References7
Exploit DB
Exploit DB
•added 2007/05/02 12:00 a.m.•35 views

CMS Made Simple 1.0.5 - 'Stylesheet.php' SQL Injection

source: https://www.securityfocus.com/bid/23753/info CMS Made Simple is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

7.5CVSS5.8AI score0.03695EPSS
SaveExploits2
exploitpack
exploitpack
•added 2007/05/02 12:00 a.m.•27 views

CMS Made Simple 1.0.5 - Stylesheet.php SQL Injection

CMS Made Simple 1.0.5 - Stylesheet.php SQL Injection source: https://www.securityfocus.com/bid/23753/info CMS Made Simple is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

0.4AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/05/02 12:00 a.m.•6 views

CVE-2007-2473: Undefined Security Weakness

SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...

7.5CVSS6.4AI score0.03695EPSS
SaveExploits2References1
securityvulns
securityvulns
•added 2007/01/05 12:00 a.m.•39 views

CMS Made Simple non-permanent XSS

/|| | || / || / || || || / || || | || |/| || / ||| ||| |||/ http://www.nanoy.org Hacker.: NanoyMaster CMS....: CMS Made Simple Version: 1.0.2 --------exploits---------- 1 Search XSS non-permanent 2 preview XSS non-permanent 3 Admin login XSS non-permanent 4 Outro --------------------NM--...

6.2AI score
SaveExploits0
securityvulns
securityvulns
•added 2007/01/05 12:00 a.m.•48 views

CMS Made Simple non-permanent XSS

/|| | || / || / || || || / || || | || |/| || / ||| ||| |||/ http://www.nanoy.org Hacker.: NanoyMaster CMS....: CMS Made Simple Version: 1.0.2 --------exploits---------- 1 Search XSS non-permanent 2 preview XSS non-permanent 3 Admin login XSS non-permanent 4 Outro --------------------NM--...

6.2AI score
SaveExploits0
Cvelist
Cvelist
•added 2007/01/03 2:00 a.m.•41 views

CVE-2006-6844

Cross-site scripting XSS vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form...

5.7AI score0.01375EPSS
SaveExploits1References5
Rows per page
Query Builder