get-simple getsimple cms 3.2.1 vulnerabilities and exploits

(subscribe to this query)

admin/profile.php in GetSimple CMS 3.x has XSS in a name field.

Get-simple Getsimple Cms 3.0 Get-simple Getsimple Cms 3.1 Get-simple Getsimple Cms 3.1.1 Get-simple Getsimple Cms 3.1.2 Get-simple Getsimple Cms 3.2 Get-simple Getsimple Cms 3.2.1 Get-simple Getsimple Cms 3.2.2 Get-simple Getsimple Cms 3.2.3 Get-simple Getsimple Cms 3.3.0 Get-simple Getsimple Cms 3.3.1 Get-simple Getsimple Cms 3.3.2

XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 up to and including 3.3.x prior to 3.3.5 Beta 1, when in certain configurations, allows remote malicious users to read arbitrary files via the data parameter.

Get-simple Getsimple Cms 3.3.2 Get-simple Getsimple Cms 3.2 Cagintranetworks Getsimple Cms 3.3.3 Cagintranetworks Getsimple Cms 3.3.4 Get-simple Getsimple Cms 3.1.1 Get-simple Getsimple Cms 3.1.2 Get-simple Getsimple Cms 3.2.1 Get-simple Getsimple Cms 3.2.2 Get-simple Getsimple Cms 3.3.0 Get-simple Getsimple Cms 3.2.3 Get-simple Getsimple Cms 3.3.1

Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) Email Address or (2) Custom Permalink Structure fields in admin/settings.php; (3) path par...

Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS prior to 3.2.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) id parameter to backup-edit.php; (2) title or (3) menu parameter to edit.php; or (4) path or (5) returnid parameter ...

Get-simple Getsimple Cms

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook