EUVD-2014-1679

Malware in sbrugna...

EUVD-2014-8555

Malware in sbrugna...

EUVD-2010-4828

Malware in sbrugna...

EUVD-2013-7022

Malware in sbrugna...

EUVD-2017-17044

Malware in sbrugna...

EUVD-2018-8176

Malware in sbrugna...

EUVD-2017-2320

Malware in sbrugna...

EUVD-2019-7112

Malware in sbrugna...

EUVD-2018-9581

Malware in sbrugna...

EUVD-2024-52739

Malicious code in bioql PyPI...

EUVD-2024-52740

Malicious code in bioql PyPI...

EUVD-2023-55968

Malicious code in bioql PyPI...

EUVD-2022-24804

Malicious code in bioql PyPI...

EUVD-2024-52738

Malicious code in bioql PyPI...

CVE-2013-10032 GetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload

An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows authenticated users to upload arbitrary files without proper validation of MIME types or extensions. By uploading a .pht file containing PHP code, an attacker ca...

CVE-2013-10032

CVE-2013-10032 affects GetSimpleCMS 3.2.1 via upload.php, where authenticated users can upload arbitrary files without proper MIME/extension validation, allowing a disguised .pht containing PHP code to be placed in the web root and executed. Root cause: blacklist-based filtering instead of a whit...

CVE-2013-10032 GetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload

An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows authenticated users to upload arbitrary files without proper validation of MIME types or extensions. By uploading a .pht file containing PHP code, an attacker ca...

GetSimple CMS 安全漏洞

GetSimple CMS is a content management system from GetSimple CMS open source. A security vulnerability exists in GetSimple CMS version 3.2.1, which stems from the upload function not properly validating MIME types and extensions, which could lead to remote code execution...

CVE-2025-48492

GetSimple CMS is a content management system. In versions starting from 3.3.16 to 3.3.21, an authenticated user with access to the Edit component can inject arbitrary PHP into a component file and execute it via a crafted query string, resulting in Remote Code Execution RCE. This issue is set to ...

CVE-2025-48492

GetSimple CMS is a content management system. In versions starting from 3.3.16 to 3.3.21, an authenticated user with access to the Edit component can inject arbitrary PHP into a component file and execute it via a crafted query string, resulting in Remote Code Execution RCE. This issue is set to ...