CVE-2011-0635

EPSS 1.9%

Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter (FTP-Server field) to the sicore/updates/optionssav operation for index.php.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/16016unverified exploitdbwww.exploit-db.com/exploits/16016unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/70487 http://secunia.com/advisories/42953 https://exchange.xforce.ibmcloud.com/vulnerabilities/64826 http://www.exploit-db.com/exploits/16016 http://www.securityfocus.com/archive/1/515809/100/0/threaded http://www.securityfocus.com/bid/45906