Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2023/12/17 2:00 p.m.•45 views

CVE-2023-6901 codelyfe Stupid Simple CMS HTTP POST Request handle-command.php os command injection

A vulnerability, which was classified as critical, was found in codelyfe Stupid Simple CMS up to 1.2.3. This affects an unknown part of the file /terminal/handle-command.php of the component HTTP POST Request Handler. The manipulation of the argument command with the input whoami leads to os...

7.5CVSS10AI score0.02864EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/17 12:00 a.m.•1 views

CVE-2023-6901: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, was found in codelyfe Stupid Simple CMS up to 1.2.3. This affects an unknown part of the file /terminal/handle-command.php of the component HTTP POST Request Handler. The manipulation of the argument command with the input whoami leads to os...

9.8CVSS7AI score0.02864EPSS
SaveExploits1References2
Rows per page
Query Builder