Skip to content
OpenAdvisories

Vendor

GetSimple CMS Project

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.7
    CVE-2013-10032 Public exploit

    GetSimple CMS 3.2.1 Authenticated RCE via Arbitrary PHP File Upload

    An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows authenticated users to upload arbitrary files without proper validation of MIME types or extensions. By uploading a .pht fi…