Search vulnerabilities

Results 2

Export CSV
CVE-2017-8081

Poor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate privileges to an arbitrary user or conduct CSRF attacks via calculation of a session cookie or CSRF nonce.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Products
CVE-2014-8790

XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read arbitrary files via the data parameter.

CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed