CVE-2020-18657

概要

参考情報

• GetSimpleCMS/GetSimpleCMS · Exploit
• LoRexxar/CVE_Request · Release Notes
• seebug.org/vuldb/ssvid-97929 · Third Party Advisory

getsimplecms のその他の脆弱性

• CVE-2021-47870中 5.4GetSimple CMS My SMTP Contact Plugin 1.1.2 suffers from a Stored Cross-Site Scripting (XSS) vulnerability. The plugin attempts to sanitize u…
• CVE-2021-47860中 4.3GetSimple CMS Custom JS 0.1 plugin contains a cross-site request forgery vulnerability that allows unauthenticated attackers to inject arbit…
• CVE-2021-47830中 6.5GetSimple CMS My SMTP Contact Plugin 1.1.1 contains a cross-site request forgery (CSRF) vulnerability. Attackers can craft a malicious webpa…
• CVE-2021-47778高 7.2GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator can inject arbitrary …
• CVE-2013-10032高 8.8An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows auth…