Tag: CMS Made Simple

CMS Made Simple Blind SQL Injection, Resurrected

May 30, 2022

—

by

c̯̦͖̿y̖̳̒b̥͊ĕ̦̈́ͅr͕̽ŵͬo̬͎̱ͤͅr̃m̺

in Exploit, Vulnerabilities

This was found while working on a HackTheBox challenge. I won’t go into details of the challenge, because that’s not the point. The challenge box was running an old version of CMS Made Simple, a Content Management System written in PHP. When approaching the box, it’s easy to determine the version and find the public…