CVE-2014-8722

GetSimple CMS 3.3.4 is affected by CVE-2014-8722, enabling information disclosure via direct requests to (1) data/users/.xml, (2) backups/users/.xml.bak, (3) data/other/authorization.xml, and (4) data/other/appid.xml. Root cause is exposed sensitive data without proper access control. Public expl...

PT-2017-6266

Name of the Vulnerable Software and Affected Versions GetSimple CMS version 3.3.4 Description The issue allows remote attackers to obtain sensitive information via direct requests to specific files, including "data/users/.xml", "backups/users/.xml.bak", "data/other/authorization.xml", or...

CVE-2014-8722: Exposure of Sensitive Information to an Unauthorized Actor

GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to 1 data/users/ .xml, 2 backups/users/ .xml.bak, 3 data/other/authorization.xml, or 4 data/other/appid.xml...

Potato News 1.0.0 - Local File Inclusion

Potato News 1.0.0 - Local File Inclusion 0x01 Informations: Name : Potato News 1.0.0 Download : http://potato-news.googlecode.com/files/potatonews-1.0.0.zip Vulnerability : LFI Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/admin.php Code ";...

CVE-2007-6662

Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, as demonstrated by reading the admin username and password hash in data/users.db.php...