PT-2021-10487

Name of the Vulnerable Software and Affected Versions: GetSimpleCMS version 3.4.0a Description: The issue is related to a Cross Site Scripting vulnerability. It affects the admin/snippets.php file via two specific actions: 1 Add Snippet and 2 Save snippets. Recommendations: For GetSimpleCMS versi...

CVE-2020-20391: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via 1 Add Snippet and 2 Save snippets...

PT-2021-10486

Name of the Vulnerable Software and Affected Versions: GetSimpleCMS version 3.4.0a Description: A Cross Site Scripting XSS issue exists in the admin/edit.php file. Recommendations: For GetSimpleCMS version 3.4.0a, update to a newer version that contains a fix for this issue...

CVE-2020-18657: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in GetSimpleCMS = 3.3.15 in admin/changedata.php via the redirecturl parameter and the headerssent function...

PT-2021-10197

Name of the Vulnerable Software and Affected Versions: GetSimpleCMS versions prior to 3.3.16 Description: A Cross Site Scripting XSS issue exists, allowing exploitation via the timezone parameter to the "settings.php" endpoint. Recommendations: For versions prior to 3.3.16, update to version 3.3....

CVE-2020-18658: Improper Neutralization of Input During Web Page Generation

Cross Site Scriptiong XSS vulnerability in GetSimpleCMS =3.3.15 via the timezone parameter to settings.php...

Arbitrary File Deletion Vulnerability in GetSimpleCMS

GetSimpleCMS is geared towards small business owners who can simply control their website content. An arbitrary file deletion vulnerability exists in GetSimpleCMS. An attacker can exploit this vulnerability to delete arbitrary files by constructing a malicious url request...

GetSimpleCMS Path Traversal Vulnerability

GetSimpleCMS is a content management system for individual developers. A path traversal vulnerability exists in GetSimpleCMS-3.3.15. An attacker can exploit this vulnerability to delete arbitrary files...

CVE-2020-18191

GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...

CVE-2020-18191

GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...

Directory traversal

GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...

CVE-2020-18191

GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...

CVE-2020-18191

GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...

CVE-2020-18191

GetSimpleCMS-3.3.15 is affected by a directory traversal vulnerability. Remote attackers can delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php. Root cause: unvalidated directory traversal in the admin log handling. Impact: potential unauthorized file deletion. Exploitation details and...

PT-2020-15096

Name of the Vulnerable Software and Affected Versions GetSimpleCMS version 3.3.15 Description The issue allows remote attackers to delete arbitrary files. This is achieved through a directory traversal attack. The "/admin/log.php" API endpoint is involved in the exploitation. Recommendations For...

CVE-2020-18191: Improper Limitation of a Pathname to a Restricted Directory

GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...

GetSimpleCMS - Unauthenticated Remote Code Execution Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "GetSimpleCMS Unauthenticated RCE", 'Description' = %q This module exploits a vulnerability found in GetSimpleCMS, which allows unauthenticated...

GetSimpleCMS - Unauthenticated Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "GetSimpleCMS Unauthenticated RCE", 'Description' = %q This module exploits a vulnerability found in GetSimpleCMS, which allows unauthenticated...

GetSimpleCMS 3.3.15 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "GetSimpleCMS Unauthenticated RCE", 'Description' = %q This module exploits a vulnerability found in GetSimpleCMS, which allows unauthenticated...

GetSimpleCMS Unauthenticated RCE

This module exploits a vulnerability found in GetSimpleCMS, which allows unauthenticated attackers to perform Remote Code Execution. An arbitrary file upload PHPcode for example vulnerability can be triggered by an authenticated user, however authentication can be bypassed by leaking the cms API...