Design/Logic Flaw

2023-10-1915:15:00

PRIOn knowledge base

www.prio-n.com

getsimplecms

remote code execution

crafted payload

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%

An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo().

CPENameOperatorVersion
getsimplecmseq3.4.97

CPE	Name	Operator	Version
	getsimplecms	eq	3.4.97

References

github.com/Num-Nine/CVE/wiki/A-file-write-vulnerability-exists-in-GetSimpleCMS