CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 3CVE-2007-2473 – CMS Made Simple 1.0.5 - 'Stylesheet.php' SQL Injection
https://notcve.org/view.php?id=CVE-2007-2473
SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter. Vulnerabilidad de inyección SQL en el stylesheet.php del CMS Made Simple 1.0.5 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro templateid. • https://www.exploit-db.com/exploits/29941 http://blog.cmsmadesimple.org/2007/04/24/cms-made-simple-106-released http://osvdb.org/35744 http://secunia.com/advisories/25082 http://www.scanit.be/advisory-2007-05-02.html http://www.securityfocus.com/bid/23753 http://www.vupen.com/english/advisories/2007/1628 https://exchange.xforce.ibmcloud.com/vulnerabilities/34044 •
CVSS: 6.8EPSS: 3%CPEs: 1EXPL: 2CVE-2006-6844
https://notcve.org/view.php?id=CVE-2006-6844
Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo opcional de comentario de usuario en el CMS Made Simple 1.0.2 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del formulario de comentario del usuario. • http://securityreason.com/securityalert/2087 http://securitytracker.com/id?1017445 http://www.l0j1k.com/security/CMSMadeSimple_1.0.2_25Dec06.txt http://www.securityfocus.com/archive/1/455306/100/0/threaded http://www.securityfocus.com/bid/21756 •
CVSS: 6.8EPSS: 1%CPEs: 1EXPL: 1CVE-2006-6845 – CMS Made Simple 1.0.2 - 'SearchInput' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2006-6845
Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the cntnt01searchinput parameter in a Search action. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)en index.php en CMS Made Simple 1.0.2 permite a un atacante remoto inyectar secuencias de comandos web o HTML a través del parámetro cntnt01searchinput en una acción de búsqueda. • https://www.exploit-db.com/exploits/29272 http://osvdb.org/32571 http://secunia.com/advisories/23582 http://www.securityfocus.com/archive/1/455417/100/0/threaded http://www.securityfocus.com/bid/21527 http://www.vupen.com/english/advisories/2007/0027 •
CVSS: 4.3EPSS: 2%CPEs: 1EXPL: 2CVE-2005-3083 – CMS Made Simple 0.10 - 'index.php' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2005-3083
Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 0.10 allows remote attackers to inject arbitrary web script or HTML via the page parameter. • https://www.exploit-db.com/exploits/26298 http://marc.info/?l=bugtraq&m=112785315518373&w=2 http://www.securityfocus.com/bid/14937 •
CVSS: 7.5EPSS: 6%CPEs: 1EXPL: 2CVE-2005-2846 – CMS Made Simple 0.10 - 'Lang.php' Remote File Inclusion
https://notcve.org/view.php?id=CVE-2005-2846
PHP remote file inclusion vulnerability in lang.php in CMS Made Simple 0.10 and earlier allows remote attackers to execute arbitrary PHP code via the nls[file][vx][vxsfx] parameter. • https://www.exploit-db.com/exploits/26217 http://forum.cmsmadesimple.org/index.php/topic%2C1549.0.html http://marc.info/?l=bugtraq&m=112552342004406&w=2 http://secunia.com/advisories/16654 http://www.securityfocus.com/bid/14709 •