CVE-2019-17226

CMS Made Simple CMSMS 2.2.11 allows XSS via the Site Admin Module Manager Search Term field...

Cross site scripting

CMS Made Simple CMSMS 2.2.11 allows XSS via the Site Admin Module Manager Search Term field...

CVE-2019-17226

CMS Made Simple CMSMS 2.2.11 allows XSS via the Site Admin Module Manager Search Term field...

CVE-2019-17226: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.11 allows XSS via the Site Admin Module Manager Search Term field...

CVE-2019-9061

An issue was discovered in CMS Made Simple 2.2.8. In the module ModuleManager in the file action.installmodule.php, it is possible to reach an unserialize call with untrusted input and achieve authenticated object injection by using the "install module" feature...

CVE-2019-9061

CMS Made Simple v2.2.8 is affected via the ModuleManager’s action.installmodule.php where an unserialize call with untrusted input can be triggered, enabling authenticated object injection when using the "install module" feature. This is supported across multiple sources (NVD/CVE-2019-9061 and PT...

PT-2019-19344 · Cms Made Simple · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.8 Description: An issue was discovered in the ModuleManager module, specifically in the action.installmodule.php file, where it is possible to reach an unserialize call with untrusted input. This can lead to...

CVE-2014-2639

Unspecified vulnerability in HP MPIO Device Specific Module Manager before 4.02.00 allows local users to gain privileges via unknown vectors...

CVE-2014-2639

Summary: CVE-2014-2639 affects the HP MPIO Device Specific Module Manager. The vulnerability enables local privilege escalation via arbitrary code execution on affected systems. HP states that only versions 4.01.01 and earlier are impacted and that fixed version is 4.02.00. Supported platforms in...

CVE-2014-2639

Unspecified vulnerability in HP MPIO Device Specific Module Manager before 4.02.00 allows local users to gain privileges via unknown vectors...

CVE-2014-2639: Improper Control of Generation of Code

Unspecified vulnerability in HP MPIO Device Specific Module Manager before 4.02.00 allows local users to gain privileges via unknown vectors...

Joomla NoNumber Framework Local File Inclusion / Shell Upload

Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugin by NoNumber! contains multiple...

CVE-2006-4474

CVE-2006-4474 affects Joomla! prior to 1.0.11, enabling remote XSS via unspecified parameters in Admin Module Manager, Admin Help, and Search. The underlying issue is cross-site scripting that allows injection of arbitrary script/HTML. The entry notes the vulnerability in Joomla! before 1.0.11 an...

CVE-2006-4474

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.0.11 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in 1 Admin Module Manager, 2 Admin Help, and 3 Search...

CVE-2006-4474: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.0.11 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in 1 Admin Module Manager, 2 Admin Help, and 3 Search...