186 matches found
CVE-2023-46042
GetSimpleCMS v3.4.0a is affected by a remote code execution vulnerability triggered by a crafted payload to phpinfo(). The issue is described across multiple sources (NVD, Red Hat, CNNVD, CVE listings, PT-Security, etc.) with no public details on the exact fix version in the provided documents. R...
CVE-2023-46042
An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo...
CVE-2023-46042
An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo...
PT-2023-29812 · Unknown · Getsimple Cms
Name of the Vulnerable Software and Affected Versions: GetSimpleCMS version 3.4.0a Description: An issue in GetSimpleCMS allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo function. Recommendations: For GetSimpleCMS version 3.4.0a, update to a version that fix...
CVE-2023-46042: Improper Control of Generation of Code
An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo...
CVE-2021-36601
GetSimpleCMS 3.3.16 contains a cross-site Scripting XSS vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter...
CVE-2021-36601
GetSimpleCMS 3.3.16 contains a cross-site Scripting XSS vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter...
Cross site scripting
GetSimpleCMS 3.3.16 contains a cross-site Scripting XSS vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter...
CVE-2021-36601
CVE-2021-36601 affects GetSimpleCMS 3.3.16: an XSS vulnerability exists in the siteURL parameter of admin/settings.php, caused by inadequate filtering (described as Function TSL not filtering the check). Multiple sources (Red Hat, NVD/NVD-variant, OSV, OpenVAS, etc.) corroborate a cross-site scri...
CVE-2021-36601
GetSimpleCMS 3.3.16 contains a cross-site Scripting XSS vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter...
CVE-2021-36601: Improper Neutralization of Input During Web Page Generation
GetSimpleCMS 3.3.16 contains a cross-site Scripting XSS vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter...
getsimplecms 跨站脚本漏洞
getsimplecms is a content management system for individual developers. A cross-site scripting vulnerability exists in getsimplecms, which stems from an XSS vulnerability in the siteURL parameter of the /admin/settings.php page...
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
Open redirect
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
CVE-2020-18660
GetSimpleCMS
CVE-2020-18660
GetSimpleCMS =3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter...
CVE-2020-18657
Cross Site Scripting XSS vulnerability in GetSimpleCMS = 3.3.15 in admin/changedata.php via the redirecturl parameter and the headerssent function...