Show filters
44 Total Results
Displaying 11-20 of 44
Sort by:
Attacker Value
Unknown
CVE-2020-18660
Disclosure Date: June 23, 2021 (last updated February 22, 2025)
GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.
0
Attacker Value
Unknown
CVE-2020-18659
Disclosure Date: June 23, 2021 (last updated February 22, 2025)
Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php
0
Attacker Value
Unknown
CVE-2020-18658
Disclosure Date: June 23, 2021 (last updated February 22, 2025)
Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php.
0
Attacker Value
Unknown
CVE-2020-18657
Disclosure Date: June 23, 2021 (last updated February 22, 2025)
Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_sent function.
0
Attacker Value
Unknown
CVE-2020-20389
Disclosure Date: June 23, 2021 (last updated February 22, 2025)
Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php.
0
Attacker Value
Unknown
CVE-2020-20391
Disclosure Date: June 23, 2021 (last updated February 22, 2025)
Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippets.
0
Attacker Value
Unknown
CVE-2021-28976
Disclosure Date: June 23, 2021 (last updated February 22, 2025)
Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess.
0
Attacker Value
Unknown
CVE-2021-28977
Disclosure Date: June 23, 2021 (last updated February 22, 2025)
Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla, pages, and gzip files,
0
Attacker Value
Unknown
CVE-2020-18191
Disclosure Date: October 02, 2020 (last updated February 22, 2025)
GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php
0
Attacker Value
Unknown
CVE-2020-24861
Disclosure Date: October 01, 2020 (last updated February 22, 2025)
GetSimple CMS 3.3.16 allows in parameter 'permalink' on the Settings page persistent Cross Site Scripting which is executed when you create and open a new page
0
