Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2010-4311

Disclosure Date: November 26, 2010 (last updated October 04, 2023)
Free Simple Software 1.0 stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information.
0
0
Attacker Value
Unknown

CVE-2010-4298

Disclosure Date: November 26, 2010 (last updated October 04, 2023)
SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloads_id parameter in a download_now action to index.php.
0
0
Attacker Value
Unknown

CVE-2010-3742

Disclosure Date: October 05, 2010 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) meta or (2) phpincdir parameter, a different issue than CVE-2010-3307.
0
0
Attacker Value
Unknown

CVE-2010-3307

Disclosure Date: October 05, 2010 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) body, (2) footer, (3) header, (4) menu_left, or (5) menu_right parameter.
0
0