After playing around with WorkSimple 1.3.5 (and apparently not doing much testing), login.php doesn't redirect on login and cp.php strips HTML. Download the attachments below and replace cp.php and login.php with the new versions. Save the new versions as cp.php and login.php respectively and upload them to your WorkSimple install directory.
| Attachment | Size |
|---|---|
 login.php_.txt | 1 KB |
| cp.php_.txt | 10.7 KB |
saw this online. has it been fixed?
http://www.exploit-db.com/exploits/11550/
As far as I can remember, yes. I haven't looked at the WorkSimple code in a very long time, but I remember seeing these exploits of WorkSimple around the web and fixing the code (at least I think so ;) )