15 matches found
EUVD-2017-7962
Malware in sbrugna...
CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2017-36506)
CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in CMS...
CVE-2017-16784
In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter...
CVE-2017-16783
In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter...
CVE-2017-16784
In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter...
Cross site scripting
In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter...
CVE-2017-16783
In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter...
CVE-2017-16783
In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter...
CVE-2017-16784
In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter...
CVE-2017-16783
CMS Made Simple 2.1.6 is affected by CVE-2017-16783: a Server-Side Template Injection issue exploited via the cntnt01detailtemplate parameter. Public references (NVD and exploit databases) describe a high-severity vulnerability with authenticated-free, network-exposed exploitation and impact to c...
CVE-2017-16784
CMS Made Simple 2.2.2 is affected by a Reflected XSS flaw exploitable via the cntnt01detailtemplate parameter. The vulnerability is described as Reflected XSS in multiple sources, with CVSS scores indicating a Medium impact (CVSSv3 base 6.1; CVSSv2 base 4.3). The connected documents confirm the v...
CVE-2017-16784: Improper Neutralization of Input During Web Page Generation
In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter...
PT-2017-14557
Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.2 Description The issue is related to Reflected XSS. It can be exploited via the cntnt01detailtemplate parameter. Recommendations For CMS Made Simple version 2.2.2, consider restricting access to the...
PT-2017-14556
Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.1.6 Description The issue is related to Server-Side Template Injection. It can be exploited via the cntnt01detailtemplate parameter. Recommendations For CMS Made Simple version 2.1.6, consider restricting access to th...