CVE-2021-47732

Description

References

• cmsimple.org/en · Product
• exploit-db.com/exploits/49751 · Exploit
• vulncheck.com/advisories/cmsimple-stored-cross-site-scripting-via-filebrowser-external-input · Third Party Advisory

Mais vulnerabilidades de cmsimple

• CVE-2021-47735ALTO 8.8CMSimple 5.4 contains an authenticated remote code execution vulnerability that allows logged-in attackers to inject malicious PHP code into…
• CVE-2021-47734ALTO 7.8CMSimple 5.4 contains an authenticated local file inclusion vulnerability that allows remote attackers to manipulate PHP session files and e…
• CVE-2021-47733MÉDIO 6.1CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding…
• CVE-2024-58280ALTO 8.8CMSimple 5.15 contains a remote command execution vulnerability that allows authenticated attackers to modify file extensions and upload mal…
• CVE-2024-57549ALTO 7.5CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a GET request.