163 matches found
PT-2023-32557 · Unknown · Getsimple Cms
Name of the Vulnerable Software and Affected Versions: GetSimpleCMS versions 3.3.16 through 3.4.0a Description: A critical issue affects the processing of the file /admin/theme-edit.php, leading to code injection. The attack can be initiated remotely. Recommendations: For versions 3.3.16 through...
GetSimpleCMS Cross-Site Scripting Vulnerability
GetSimpleCMS is a content management system for individual developers. A cross-site scripting vulnerability exists in GetSimpleCMS version v3.4.0a, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by a remote attacker to execu...
CVE-2023-46040
Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function...
Cross site scripting
Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function...
CVE-2023-46040
Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function...
GetSimpleCMS 跨站脚本漏洞
GetSimpleCMS is a content management system for individual developers. A cross-site scripting vulnerability exists in GetSimpleCMS version v3.4.0a, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by a remote attacker to execu...
PT-2023-29811 · Unknown · Getsimple Cms
Name of the Vulnerable Software and Affected Versions: GetSimpleCMS version 3.4.0a Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code by sending a crafted payload to the components.php function. Recommendations: For GetSimpleCMS version 3.4.0a, consider...
CVE-2023-46040
GetSimpleCMS, version 3.4.0a, contains a Cross-Site Scripting vulnerability that allows a remote attacker to execute arbitrary code via a crafted payload to the components.php function. The issue is documented across multiple sources (CVE-2023-46040) and is categorized as CVSS 3.1: Medium (ATT&CK...
CVE-2023-46040
Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to the components.php function...
CVE-2023-46042
An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo...
CVE-2023-46042
An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo...
Design/Logic Flaw
An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo...
GetSimpleCMS Security Vulnerability
GetSimpleCMS is a content management system for individual developers. A security vulnerability exists in GetSimpleCMS version v.3.4.0a, which can be exploited to execute arbitrary code via phpinfo...
CVE-2023-46042
GetSimpleCMS v3.4.0a is affected by a remote code execution vulnerability triggered by a crafted payload to phpinfo(). The issue is described across multiple sources (NVD, Red Hat, CNNVD, CVE listings, PT-Security, etc.) with no public details on the exact fix version in the provided documents. R...
CVE-2023-46042
An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo...
PT-2023-29812 · Unknown · Getsimple Cms
Name of the Vulnerable Software and Affected Versions: GetSimpleCMS version 3.4.0a Description: An issue in GetSimpleCMS allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo function. Recommendations: For GetSimpleCMS version 3.4.0a, update to a version that fix...
CVE-2023-46042
An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo...
CVE-2021-36601
GetSimpleCMS 3.3.16 contains a cross-site Scripting XSS vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter...