Lucene search
PRIOn knowledge basePRION:CVE-2023-6901HistoryDec 17, 2023 - 2:15 p.m.
Command injection
2023-12-1714:15:00
PRIOn knowledge base
www.prio-n.com
3
vulnerability
command injection
codelyfe stupid simple cms
remote attack
http post request handler
os command
exploit disclosed
vdb-248259
A vulnerability, which was classified as critical, was found in codelyfe Stupid Simple CMS up to 1.2.3. This affects an unknown part of the file /terminal/handle-command.php of the component HTTP POST Request Handler. The manipulation of the argument command with the input whoami leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-248259.
| CPE | Name | Operator | Version |
|---|---|---|---|
| stupid_simple_cms | ge | 1.1.7 | |
| stupid_simple_cms | le | 1.2.3 |
Related
cve
cve
CVE-2023-6901
2023-12-17 14:15:37
cvelist
cvelist
osv
osv
CVE-2023-6901
2023-12-17 14:15:37
nvd
nvd
CVE-2023-6901
2023-12-17 14:15:37