Lucene search
K

462 matches found

OSV
OSV
added 2024/12/18 5:15 p.m.4 views

CVE-2024-55086

In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery SSRF can be achieved in the plug-in download address in the backend management system...

7.2CVSS7.2AI score0.00396EPSS
Exploits0References2
CVE
CVE
added 2024/12/18 12:0 a.m.54 views

CVE-2024-55088

CVE-2024-55088 affects GetSimple CMS CE 3.3.19 with a Server-Side Request Forgery (SSRF) in the backend plugin module . The CVSS 3.1 base score is 8.8 (HIGH) with network attack vector, low attack complexity, and privileges required, and impact to confidentiality, integrity, and availability (all...

8.8CVSS7AI score0.00242EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/12/18 12:0 a.m.19 views

CVE-2024-55088

GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery SSRF in the backend plugin module...

0.00242EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/12/18 12:0 a.m.19 views

CVE-2024-55086

In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery SSRF can be achieved in the plug-in download address in the backend management system...

0.00396EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.2 views

GetSimple CMS 安全漏洞

GetSimple CMS is a content management system from GetSimple CMS open source. A security vulnerability exists in GetSimple CMS version 3.3.19, which originates from the download address of a plugin in the backend management system, and can enable server-side request forgery attacks...

7.2CVSS6.7AI score0.00396EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.2 views

GetSimple CMS 安全漏洞

GetSimple CMS is a content management system from GetSimple CMS open source. A security vulnerability exists in GetSimple CMS version 3.3.19, which stems from a vulnerability in the back-end plugin module to a server-side request forgery attack...

8.8CVSS6.6AI score0.00242EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/12/18 12:0 a.m.5 views

PT-2024-36474 · Unknown · Getsimple Cms

Name of the Vulnerable Software and Affected Versions: GetSimple CMS CE version 3.3.19 Description: The issue allows for Server-Side Request Forgery SSRF in the plug-in download address on the management page of the backend management system. This can be achieved within the GetSimple CMS CE...

7.2CVSS7AI score0.00396EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/12/18 12:0 a.m.3 views

PT-2024-36475 · Unknown · Getsimple Cms

Name of the Vulnerable Software and Affected Versions: GetSimple CMS CE version 3.3.19 Description: The issue is related to Server-Side Request Forgery SSRF in the backend plugin module. This allows an attacker to forge requests from the server, potentially leading to unauthorized access or...

8.8CVSS7AI score0.00242EPSS
Exploits0References8
CVE
CVE
added 2024/12/18 12:0 a.m.50 views

CVE-2024-55086

GetSimple CMS CE 3.3.19 is affected by a vulnerability where the plugin download address in the backend management page allows Server-Side Request Forgery (SSRF) . The root cause is tied to the plugin download mechanism in the management interface, enabling an attacker to induce requests from the...

7.2CVSS6.7AI score0.00396EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/18 12:0 a.m.8 views

CVE-2024-55086

In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery SSRF can be achieved in the plug-in download address in the backend management system...

7AI score0.00396EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/12/17 12:0 a.m.10 views

GetSimple CMS <= 3.3.19 RCE Vulnerability

GetSimple CMS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS8AI score0.00833EPSS
Exploits0References1
NVD
NVD
added 2024/12/16 11:15 p.m.17 views

CVE-2024-55085

GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement RCE...

9.8CVSS0.00833EPSS
Exploits0References2
OSV
OSV
added 2024/12/16 11:15 p.m.3 views

CVE-2024-55085

GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement RCE...

9.8CVSS7.9AI score0.00833EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/12/16 12:0 a.m.7 views

CVE-2024-55085

GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement RCE...

7.9AI score0.00833EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/12/16 12:0 a.m.3 views

GetSimple CMS 安全漏洞

GetSimple CMS is a content management system from GetSimple CMS open source. A security vulnerability exists in GetSimple CMS version 3.3.19, which stems from the presence of an arbitrary code execution vulnerability that can be exploited by an attacker to implement code that can be executed...

9.8CVSS7.6AI score0.00833EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/16 12:0 a.m.17 views

CVE-2024-55085

GetSimple CMS CE 3.3.19 suffers from arbitrary code execution in the template editing function in the background management system, which can be used by an attacker to implement RCE...

0.00833EPSS
Exploits0References2
CVE
CVE
added 2024/12/16 12:0 a.m.67 views

CVE-2024-55085

CVE-2024-55085 affects GetSimple CMS CE 3.3.19. The issue is an arbitrary code execution in the template editing function of the backend management system, enabling remote code execution (RCE). Documented CVSSv3.1 base score 9.8 (CRITICAL) with network attack vector and no user interaction requir...

9.8CVSS7.7AI score0.00833EPSS
Exploits0References2Affected Software1
GithubExploit
GithubExploit
added 2024/07/31 6:27 p.m.200 views

Exploit for Code Injection in Get-Simple Getsimple_Cms

CVE-2022-41544 Exploit Script This repository contains a scri...

9.8CVSS9.7AI score0.09442EPSS
Exploits12
GithubExploit
GithubExploit
added 2024/07/31 6:27 p.m.135 views

Exploit for Code Injection in Get-Simple Getsimple_Cms

CVE-2022-41544 Exploit Script This repository contains a scri...

9.8CVSS9.7AI score0.09442EPSS
Exploits12
GithubExploit
GithubExploit
added 2024/07/31 6:27 p.m.384 views

Exploit for Code Injection in Get-Simple Getsimple_Cms

CVE-2022-41544 Exploit Script This repository contains a scri...

9.8CVSS9.7AI score0.09442EPSS
Exploits12
Rows per page
Query Builder