CVE-2018-17103: Cross-Site Request Forgery (CSRF)

An issue was discovered in GetSimple CMS v3.3.13. There is a CSRF vulnerability that can change the administrator's password via admin/settings.php. NOTE: The vendor reported that the PoC was sending a value for the nonce parameter...

PT-2018-13897 · Getsimple · Getsimple Cms

Name of the Vulnerable Software and Affected Versions: GetSimple CMS version 3.3.13 Description: An issue was discovered that allows for a CSRF vulnerability, which can change the administrator's password via the "admin/settings.php" endpoint. The vendor reported that the proof of concept was...

Cagintranet GetSimple CMS Cross-Site Scripting Vulnerability

Cagintranet GetSimple CMS is an XML-based content management system CMS from Cagintranet Networks, USA. The system includes a theme selector and editor, component editor, image and file managers, and more. A cross-site scripting vulnerability exists in the admin/edit.php page in Cagintranet...

CVE-2018-16325

There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...

Cross site scripting

There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...

CVE-2018-16325

There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...

CVE-2018-16325

There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...

CVE-2018-16325

GetSimple CMS 3.4.0.9 is affected by Stored/ reflected XSS via the admin/edit.php title field (CVE-2018-16325). The available connected documents confirm XSS in the title input, but do not provide exploitation details or a patch/mitigation entry. No explicit root-cause or vulnerable vector beyond...

CVE-2018-16325

There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...

CVE-2018-16325: Improper Neutralization of Input During Web Page Generation

There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field...

PT-2018-13489

Name of the Vulnerable Software and Affected Versions GetSimple CMS version 3.4.0.9 Description The issue concerns a Cross-Site Scripting XSS flaw. It can be exploited via the title field in the admin/edit.php endpoint. Recommendations For GetSimple CMS version 3.4.0.9, avoid using the title fiel...

CVE-2018-15843

GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field...

CVE-2018-15843

GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field...

Design/Logic Flaw

GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field...

CVE-2018-15843

GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field...

CVE-2018-15843

GetSimple CMS 3.3.14 is vulnerable to Cross-Site Scripting (XSS) through the admin/edit.php “Add New Page” field. The CNVD entry attributes the issue to inadequate filtering of the Add New Page input in GetSimple CMS 3.3.14, enabling a remote attacker to inject arbitrary web script or HTML. The C...

CVE-2018-15843

GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field...

CVE-2018-15843: Improper Neutralization of Input During Web Page Generation

GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field...

PT-2018-13232

Name of the Vulnerable Software and Affected Versions GetSimple CMS version 3.3.14 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs in the admin/edit.php file, specifically through the "Add New Page" field. Recommendations For GetSimple CMS version 3.3.14, update ...

GetSimple CMS 3.3.13 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: GetSimple CMS 3.3.13 - Cross Site Scripting Vulnerability Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: http://get-simple.info/ Software Link: http://get-simple.info/download/ Affected...