EUVD-2015-5312

Malware in sbrugna...

CVE-2013-1420

Multiple cross-site scripting XSS vulnerabilities in GetSimple CMS before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to backup-edit.php; 2 title or 3 menu parameter to edit.php; or 4 path or 5 returnid parameter to filebrowser.php in admin/. NOTE: t...

CVE-2013-1420: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GetSimple CMS before 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to backup-edit.php; 2 title or 3 menu parameter to edit.php; or 4 path or 5 returnid parameter to filebrowser.php in admin/. NOTE: t...

PT-2020-7349

Name of the Vulnerable Software and Affected Versions: GetSimple CMS versions prior to 3.2.1 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters, including the id parameter to "backup-edit.php", the title or menu...

GetSimple CMS Cross-Site Scripting Vulnerability (CNVD-2015-04183)

GetSimple CMS is an XML-based content management system CMS from Cagintranet Networks, USA. The system includes a theme selector and editor, component editor, image and file managers, and more. A cross-site scripting vulnerability exists in the admin/filebrowser.php script in GetSimple CMS versio...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/filebrowser.php in GetSimple CMS before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via the func parameter...

CVE-2015-5356

Cross-site scripting XSS vulnerability in admin/filebrowser.php in GetSimple CMS before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via the func parameter...

CVE-2015-5356

CVE-2015-5356 is a cross-site scripting (XSS) vulnerability in GetSimple CMS, affecting the admin/filebrowser.php script. The issue occurs in versions before 3.3.6 and allows a remote attacker to inject arbitrary web script or HTML by manipulating the func parameter. The public details consistent...

CVE-2015-5356

Cross-site scripting XSS vulnerability in admin/filebrowser.php in GetSimple CMS before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via the func parameter...

CVE-2015-5356: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/filebrowser.php in GetSimple CMS before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via the func parameter...

PT-2015-6863

Name of the Vulnerable Software and Affected Versions GetSimple CMS versions prior to 3.3.6 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the func parameter in the admin/filebrowser.php file. Recommendations For versions prior to...

Kohana Framework 2.3.3 Directory Traversal

Title: ====== Kohana Framework v2.3.3 - Directory Traversal Vulnerability Date: ===== 2013-01-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=841 VL-ID: ===== 837 Common Vulnerability Scoring System: ==================================== 7.1 Introduction: ============...

Getsimple CMS 3.1.2 - 'path' Local File Inclusion

source: https://www.securityfocus.com/bid/54866/info GetSimple is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in...