PT-2017-6267

Name of the Vulnerable Software and Affected Versions GetSimple CMS version 3.3.4 Description The issue allows remote attackers to obtain sensitive information via a direct request to API endpoints such as "plugins/anonymous data.php" or "plugins/InnovationPlugin.php", which reveals the...

CVE-2014-8723: Exposure of Sensitive Information to an Unauthorized Actor

GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to 1 plugins/anonymousdata.php or 2 plugins/InnovationPlugin.php, which reveals the installation path in an error message...