Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2017-10673
Disclosure Date: June 29, 2017 (last updated November 26, 2024)
admin/profile.php in GetSimple CMS 3.x has XSS in a name field.
0
Attacker Value
Unknown
CVE-2014-8790
Disclosure Date: January 20, 2015 (last updated October 05, 2023)
XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read arbitrary files via the data parameter.
0
Attacker Value
Unknown
CVE-2013-7243
Disclosure Date: January 17, 2014 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) post-menu field to edit.php or (2) Display name field to settings.php. NOTE: The Custom Permalink Structure and Email Address fields are already covered by CVE-2012-6621.
0
