Show filters
44 Total Results
Displaying 31-40 of 44
Sort by:
Attacker Value
Unknown
CVE-2018-16325
Disclosure Date: September 01, 2018 (last updated November 27, 2024)
There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field.
0
Attacker Value
Unknown
CVE-2018-15843
Disclosure Date: August 25, 2018 (last updated November 27, 2024)
GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field.
0
Attacker Value
Unknown
CVE-2018-9173
Disclosure Date: April 02, 2018 (last updated November 26, 2024)
Cross-site scripting (XSS) vulnerability in admin/template/js/uploadify/uploadify.swf in GetSimple CMS 3.3.13 allows remote attackers to inject arbitrary web script or HTML, as demonstrated by the movieName parameter.
0
Attacker Value
Unknown
CVE-2017-10673
Disclosure Date: June 29, 2017 (last updated November 26, 2024)
admin/profile.php in GetSimple CMS 3.x has XSS in a name field.
0
Attacker Value
Unknown
CVE-2014-8722
Disclosure Date: March 17, 2017 (last updated November 26, 2024)
GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<username>.xml, (2) backups/users/<username>.xml.bak, (3) data/other/authorization.xml, or (4) data/other/appid.xml.
0
Attacker Value
Unknown
CVE-2014-8723
Disclosure Date: March 17, 2017 (last updated November 26, 2024)
GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) plugins/anonymous_data.php or (2) plugins/InnovationPlugin.php, which reveals the installation path in an error message.
0
Attacker Value
Unknown
CVE-2015-5355
Disclosure Date: July 01, 2015 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS before 3.3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) post-content or (2) post-title parameter to admin/edit.php.
0
Attacker Value
Unknown
CVE-2015-5356
Disclosure Date: July 01, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in admin/filebrowser.php in GetSimple CMS before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via the func parameter.
0
Attacker Value
Unknown
CVE-2014-8790
Disclosure Date: January 20, 2015 (last updated October 05, 2023)
XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read arbitrary files via the data parameter.
0
Attacker Value
Unknown
CVE-2014-1603
Disclosure Date: May 14, 2014 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) param parameter to admin/load.php or (2) user, (3) email, or (4) name parameter in a Save Settings action to admin/settings.php.
0
