CVE-2023-51246

概要

参考情報

• gist.github.com/NING0121/25498c5326c2590423b26ace38d2cf39 · Third Party Advisory
• NING0121/CVE · Broken Link

getsimplecms のその他の脆弱性

• CVE-2021-47870中 5.4GetSimple CMS My SMTP Contact Plugin 1.1.2 suffers from a Stored Cross-Site Scripting (XSS) vulnerability. The plugin attempts to sanitize u…
• CVE-2021-47860中 4.3GetSimple CMS Custom JS 0.1 plugin contains a cross-site request forgery vulnerability that allows unauthenticated attackers to inject arbit…
• CVE-2021-47830中 6.5GetSimple CMS My SMTP Contact Plugin 1.1.1 contains a cross-site request forgery (CSRF) vulnerability. Attackers can craft a malicious webpa…
• CVE-2021-47778高 7.2GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator can inject arbitrary …
• CVE-2013-10032高 8.8An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows auth…