CVE-2011-0635

MEDIUM 6.0CVE-2011-0635 · Published 22/01/2011 · updated 16/06/2026

In short

CVE-2011-0635 is a MEDIUM (CVSS 6.0) vulnerability affecting simploo cms (simploo).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 80.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simploo cms simploo	`= 1.2.0= 1.3.0= 1.5.0= 1.5.2= 1.7.0≤ 1.7.1`	No fix yet

Description

Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter (FTP-Server field) to the sicore/updates/optionssav operation for index.php.

References

osvdb.org/70487
secunia.com/advisories/42953 · Vendor Advisory
exploit-db.com/exploits/16016 · Exploit
securityfocus.com/archive/1/515809/100/0/threaded
securityfocus.com/bid/45906 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/64826

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free