CVE-2018-19507

CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI...

CVE-2018-19507

CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI...

CVE-2018-19507: Improper Neutralization of Input During Web Page Generation

CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI...

PT-2018-14978

Name of the Vulnerable Software and Affected Versions CMSimple version 4.7.5 Description The issue allows for XSS via an admin's use of a "?file=config&action=array" URI. Recommendations For CMSimple version 4.7.5, update to a version that fixes this issue, as using the ?file=config&action=array...

PT-2007-5162 · Simple Machines · Simple Machines Forum

Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF version 1.1.3 Description: A directory traversal issue in index.php allows remote attackers to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. However, it is...