| Package | Affected versions | Patched versions |
|---|---|---|
| simploo cms | = 1.2.0= 1.3.0= 1.5.0= 1.5.2= 1.7.0≤ 1.7.1 |
Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter (FTP-Server field) to the sicore/updates/optionssav operation for index.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free