Skip to content
OpenAdvisories

Vendor

Cmsimple

5 known vulnerabilities.

Products

Cmsimple 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2021-47735

    CMSimple 5.4 Authenticated Remote Code Execution via Template Editing

    CMSimple 5.4 contains an authenticated remote code execution vulnerability that allows logged-in attackers to inject malicious PHP code into template files. Attackers can exploit the template editing functionality by crafting a reverse shell payload and savin…

    Cmsimple Cmsimple
  • High 7.8
    CVE-2021-47734

    CMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution

    CMSimple 5.4 contains an authenticated local file inclusion vulnerability that allows remote attackers to manipulate PHP session files and execute arbitrary code. Attackers can leverage the vulnerability by changing the functions file path and uploading malic…

    Cmsimple Cmsimple
  • High 8.6
    CVE-2024-58280

    CMSimple 5.15 Remote Command Execution via Extensions Configuration

    CMSimple 5.15 contains a remote command execution vulnerability that allows authenticated attackers to modify file extensions and upload malicious PHP files. Attackers can append ',php' to Extensions_userfiles and upload a shell script to the media directory …

    Cmsimple Cmsimple