CVE-2021-47860

概要

参考情報

• get-simple.info · Product
• GetSimpleCMS/GetSimpleCMS · Product
• boku7/gsCMS-CustomJS-Csrf2Xss2Rce · Exploit
• exploit-db.com/exploits/49712 · Exploit
• exploit-db.com/exploits/49816 · Exploit
• vulncheck.com/advisories/getsimple-cms-custom-js-csrf-to-xss-to-rce · Third Party Advisory

getsimplecms のその他の脆弱性

• CVE-2021-47870中 5.4GetSimple CMS My SMTP Contact Plugin 1.1.2 suffers from a Stored Cross-Site Scripting (XSS) vulnerability. The plugin attempts to sanitize u…
• CVE-2021-47830中 6.5GetSimple CMS My SMTP Contact Plugin 1.1.1 contains a cross-site request forgery (CSRF) vulnerability. Attackers can craft a malicious webpa…
• CVE-2021-47778高 7.2GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator can inject arbitrary …
• CVE-2013-10032高 8.8An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows auth…
• CVE-2024-11125中 4.3A vulnerability was found in GetSimpleCMS 3.3.16 and classified as problematic. This issue affects some unknown processing of the file /admi…