critical9.8Public exploit code
CVE-2022-41544
GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GetSimple CMS v3.3.16 - Remote Code Execution (RCE)2023-05-23 · webapps · php · Verified
Impact
GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Get-Simple | Getsimple Cms | Version 3.3.16 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/172553/GetSimple-CMS-3.3.16-Shell-Upload.html
- https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1352
- http://packetstormsecurity.com/files/172553/GetSimple-CMS-3.3.16-Shell-Upload.html
- https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1352