get-simple vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1, 3.1.2, 3.2.3, and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) Email Address or (2) Custom Permalink Structure fields in admin/settings.php; (3) path par...

4.3

CVSSv2

admin/profile.php in GetSimple CMS 3.x has XSS in a name field.

Get-simple Getsimple Cms 3.0 Get-simple Getsimple Cms 3.1 Get-simple Getsimple Cms 3.1.1 Get-simple Getsimple Cms 3.1.2 Get-simple Getsimple Cms 3.2 Get-simple Getsimple Cms 3.2.1 Get-simple Getsimple Cms 3.2.2 Get-simple Getsimple Cms 3.2.3 Get-simple Getsimple Cms 3.3.0 Get-simple Getsimple Cms 3.3.1 Get-simple Getsimple Cms 3.3.2

5

CVSSv2

XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 up to and including 3.3.x prior to 3.3.5 Beta 1, when in certain configurations, allows remote malicious users to read arbitrary files via the data parameter.

Get-simple Getsimple Cms 3.3.2 Get-simple Getsimple Cms 3.2 Cagintranetworks Getsimple Cms 3.3.3 Cagintranetworks Getsimple Cms 3.3.4 Get-simple Getsimple Cms 3.1.1 Get-simple Getsimple Cms 3.1.2 Get-simple Getsimple Cms 3.2.1 Get-simple Getsimple Cms 3.2.2 Get-simple Getsimple Cms 3.3.0 Get-simple Getsimple Cms 3.2.3 Get-simple Getsimple Cms 3.3.1

NA

A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to ...

Get-simple Getsimplecms 3.4.0a Get-simple Getsimplecms 3.3.16

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote malicious users to inject arbitrary web script or HTML via the (1) post-menu field to edit.php or (2) Display name field to settings.php. NOTE: The Custom Permalink Structure and Ema...

Get-simple Getsimple Cms 3.1.2 Get-simple Getsimple Cms 3.2.3

4.3

CVSSv2

Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_sent function.

Get-simple Getsimplecms

4.3

CVSSv2

Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php.

Get-simple Getsimplecms

4.3

CVSSv2

Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php

Get-simple Getsimplecms

5.8

CVSSv2

GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.

Get-simple Getsimplecms

6.5

CVSSv2

Remote Code Execution vulnerability in GetSimpleCMS prior to 3.3.16 in admin/upload.php via phar filess.

Get-simple Getsimplecms

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook