EUVD-2007-0608

Malware in sbrugna...

EUVD-2007-0549

Malware in sbrugna...

CVE-2007-0610

CVE-2007-0610 affects CMSimple 2.7 fix1 in the mailform component. The vulnerability is a Cross-Site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the sender parameter. The available documentation attributes the issue to the mailform feature, and the...

CVE-2007-0551

CMSimple 2.7 is affected by CVE-2007-0551 via multiple PHP remote file inclusion vulnerabilities in cms.php, allowing an attacker to execute arbitrary PHP code through the pth[file][config] or pth[file][image] parameters. The issue stems from including user-supplied URLs, enabling code execution ...

CVE-2007-0551

Multiple PHP remote file inclusion vulnerabilities in cmsimple/cms.php in CMSimple 2.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pthfileconfig and 2 pthfileimage parameters...