CVE-2020-18657

Description

References

• GetSimpleCMS/GetSimpleCMS · Exploit
• LoRexxar/CVE_Request · Release Notes
• seebug.org/vuldb/ssvid-97929 · Third Party Advisory

getsimplecms 的其他漏洞

• CVE-2021-47870中危 5.4GetSimple CMS My SMTP Contact Plugin 1.1.2 suffers from a Stored Cross-Site Scripting (XSS) vulnerability. The plugin attempts to sanitize u…
• CVE-2021-47860中危 4.3GetSimple CMS Custom JS 0.1 plugin contains a cross-site request forgery vulnerability that allows unauthenticated attackers to inject arbit…
• CVE-2021-47830中危 6.5GetSimple CMS My SMTP Contact Plugin 1.1.1 contains a cross-site request forgery (CSRF) vulnerability. Attackers can craft a malicious webpa…
• CVE-2021-47778高危 7.2GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator can inject arbitrary …
• CVE-2013-10032高危 8.8An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows auth…