CVE-2020-23839

概要

参考情報

• packetstormsecurity.com/files/162016/GetSimple-CMS-3.3.16-Cross-Site-Scripting-Shell-Upload.html · Third Party Advisory
• GetSimpleCMS/GetSimpleCMS · Exploit
• boku7/CVE-2020-23839 · Third Party Advisory
• exploit-db.com/exploits/49726 · Third Party Advisory

getsimple cms のその他の脆弱性

• CVE-2022-41544緊急 9.8GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edi…
• CVE-2020-24861中 5.4GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create …
• CVE-2013-1420中 6.1Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.2.1 allow remote attackers to inject arbitrary web script or H…
• CVE-2019-16333中 5.4GetSimple CMS v3.3.15 has Persistent Cross-Site Scripting (XSS) in admin/theme-edit.php.
• CVE-2019-11231緊急 9.8An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the theme-edit.php file allows upload of files wit…