Lucene search
+L

3 matches found

CVE
CVE
•added 2008/01/04 11:00 a.m.•86 views

CVE-2007-6656

The CVE-2007-6656 entry describes an SQL injection in CMS Made Simple's TinyMCE module, specifically in content_css.php, affecting CMS Made Simple 1.2.2 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the templateid parameter. The provided sources conf...

7.5CVSS8.4AI score0.01229EPSS
SaveExploits1References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/01/04 12:00 a.m.•5 views

CVE-2007-6656: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in contentcss.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...

7.5CVSS6.4AI score0.01229EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2008/01/02 12:00 a.m.•24 views

CMS Made Simple content_css.php templateid Parameter SQL Injection

Binary data 4328.prm...

7.5CVSS7.3AI score0.01229EPSS
SaveExploits1References1
Rows per page
Query Builder