186 matches found
CVE-2020-18658: Improper Neutralization of Input During Web Page Generation
Cross Site Scriptiong XSS vulnerability in GetSimpleCMS =3.3.15 via the timezone parameter to settings.php...
CVE-2021-28977: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla, pages, and gzip files,...
Arbitrary File Deletion Vulnerability in GetSimpleCMS
GetSimpleCMS is geared towards small business owners who can simply control their website content. An arbitrary file deletion vulnerability exists in GetSimpleCMS. An attacker can exploit this vulnerability to delete arbitrary files by constructing a malicious url request...
GetSimpleCMS Path Traversal Vulnerability
GetSimpleCMS is a content management system for individual developers. A path traversal vulnerability exists in GetSimpleCMS-3.3.15. An attacker can exploit this vulnerability to delete arbitrary files...
CVE-2020-18191
GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...
CVE-2020-18191
GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...
Directory traversal
GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...
CVE-2020-18191
GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...
CVE-2020-18191
GetSimpleCMS-3.3.15 is affected by a directory traversal vulnerability. Remote attackers can delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php. Root cause: unvalidated directory traversal in the admin log handling. Impact: potential unauthorized file deletion. Exploitation details and...
CVE-2020-18191: Improper Limitation of a Pathname to a Restricted Directory
GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...
GetSimpleCMS - Unauthenticated Remote Code Execution Exploit
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "GetSimpleCMS Unauthenticated RCE", 'Description' = %q This module exploits a vulnerability found in GetSimpleCMS, which allows unauthenticated...
GetSimpleCMS - Unauthenticated Remote Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "GetSimpleCMS Unauthenticated RCE", 'Description' = %q This module exploits a vulnerability found in GetSimpleCMS, which allows unauthenticated...
GetSimpleCMS 3.3.15 Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "GetSimpleCMS Unauthenticated RCE", 'Description' = %q This module exploits a vulnerability found in GetSimpleCMS, which allows unauthenticated...
GetSimpleCMS Unauthenticated RCE
This module exploits a vulnerability found in GetSimpleCMS, which allows unauthenticated attackers to perform Remote Code Execution. An arbitrary file upload PHPcode for example vulnerability can be triggered by an authenticated user, however authentication can be bypassed by leaking the cms API...
Open redirect
GetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parameter...
CVE-2019-9915
GetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parameter...
CVE-2019-9915
GetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parameter...
CVE-2019-9915
GetSimple CMS 3.3.13 contains an Open Redirect vulnerability exposed via the admin/index.php redirect parameter. An attacker can cause victims to be redirected to a malicious site, with potential for phishing or unauthorized operations depending on the redirected context. The issue is documented ...