Lucene search
HistoryJan 22, 2011 - 10:00 p.m.
CVE-2011-0635
cve-2011-0635
static code injection
simploo cms
remote authenticated users
arbitrary php code
config
base.ini.php
ftp server
optionsav operation
index.php
nvd
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.031 Low
EPSS
Percentile
91.1%
Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter (FTP-Server field) to the sicore/updates/optionssav operation for index.php.
Affected configurations
Node
simploosimploo_cmsRange≤1.7.1
ORsimploosimploo_cmsMatch1.2.0
ORsimploosimploo_cmsMatch1.3.0
ORsimploosimploo_cmsMatch1.5.0
ORsimploosimploo_cmsMatch1.5.2
ORsimploosimploo_cmsMatch1.7.0
Related
nvd
nvd
CVE-2011-0635
2011-01-22 22:00:06
cvelist
cvelist
CVE-2011-0635
2011-01-22 21:00:00
prion
prion
Code injection
2011-01-22 22:00:00
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.031 Low
EPSS
Percentile
91.1%
Related for CVE-2011-0635