PT-2019-6894

Name of the Vulnerable Software and Affected Versions Mambo CMS version 4.6.5 Description A vulnerability in the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver. Recommendations For Mambo CMS version 4.6.5, consider restricting...

CVE-2013-2565: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in Mambo CMS v4.6.5 where the scripts thumbs.php, editorFrame.php, editor.php, images.php, manager.php discloses the root path of the webserver...

CVE-2014-2092: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lib/filemanager/ImageManager/editorFrame.php in CMS Made Simple 1.11.10 allows remote attackers to inject arbitrary web script or HTML via the action parameter, a different issue than CVE-2014-0334. NOTE: the original disclosure also reported issues that...

PT-2014-4480

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 1.11.10 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the action parameter in the editorFrame.php file. This is a distinct issue from previousl...