1283 matches found
CVE-2007-6656
SQL injection vulnerability in contentcss.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...
CVE-2007-6656
The CVE-2007-6656 entry describes an SQL injection in CMS Made Simple's TinyMCE module, specifically in content_css.php, affecting CMS Made Simple 1.2.2 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands via the templateid parameter. The provided sources conf...
CVE-2007-6656
SQL injection vulnerability in contentcss.php in the TinyMCE module for CMS Made Simple 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter...
CMS Made Simple content_css.php templateid Parameter SQL Injection
Binary data 4328.prm...
CMS Made Simple modules/TinyMCE/content_css.php templateid Parameter SQL Injection
The remote host appears to be running CMS Made Simple, a content management system written in PHP. The version of CMS Made Simple installed on the remote host fails to sanitize user-supplied input to the 'templateid' parameter of the 'modules/TinyMCE/contentcss.php' script before using it in a...
CMS Made Simple <= 1.2.2 (TinyMCE module) SQL Injection Vuln
No description provided by source. ------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX mail.....:...
CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection
------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
CMS Made Simple <= 1.2.2 (TinyMCE module) SQL Injection Vuln
Exploit for unknown platform in category web applications ============================================================ CMS Made Simple = 1.2.2 TinyMCE module SQL Injection Vuln ============================================================...
CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection
CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection ------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX mail........
CMS Made Simple <= 1.2.2 (TinyMCE module) SQL Injection Vuln
No description provided by source. ------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX...
Cross site request forgery (csrf)
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by 1 adding a user via a direct request to admin/adduser.php and 2 reading the admin log via an...
CVE-2007-5441
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by 1 adding a user via a direct request to admin/adduser.php and 2 reading the admin log via an...
CVE-2007-5444
CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files...
Design/Logic Flaw
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors...
CVE-2007-5442
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors...
Path traversal
CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in CMS Made Simple 1.1.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 the anchor tag and 2 listtags...
CVE-2007-5443
Multiple cross-site scripting XSS vulnerabilities in CMS Made Simple 1.1.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 the anchor tag and 2 listtags...
CVE-2007-5444
CMS Made Simple 1.1.3.1 is vulnerable to a path-disclosure issue: remote attackers can obtain the server’s full path by directly requesting unspecified files. This is a remote, unauthenticated weakness with partial confidentiality impact. No explicit fix/version is stated in the provided document...
CVE-2007-5443
CVE-2007-5443 describes multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.1.3.1. The description specifies remote attackers can inject arbitrary script or HTML via vectors related to (1) the anchor tag and (2) listtags, but the exact technical vectors are not detailed in th...