Stupid Simple CMS Operating System Command Injection Vulnerability

Stupid Simple CMS is a content management system by codelyfe individual developer. Stupid Simple CMS 1.2.3 and earlier versions have an operating system command injection vulnerability, which stems from an operating system command injection vulnerability in the file /terminal/handle-command.php...

PT-2023-32810 · Codelyfe · Codelyfe Stupid Simple Cms

Name of the Vulnerable Software and Affected Versions: codelyfe Stupid Simple CMS versions up to 1.2.3 Description: A critical issue was found in the HTTP POST Request Handler component, specifically affecting the file /terminal/handle-command.php. The manipulation of the command argument with th...