Cmsimple kayıtları

cmsimple üreticisine ait 20 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 5
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

20 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2021-43741İstismar yok	CMSimple 5.4 is vulnerable to Directory Traversal.cmsimple · cmsimple · CWE-22 pre-auth RCE Yol geçişi	Kritik9,8	—	%4,7	13 Nis 2022
36İzleyin	CVE-2024-57548İstismar yok	CMSimple 5.16 allows the user to edit log.php file via print page.cmsimple · cmsimple · CWE-276 Kimlik doğrulamasız	Kritik9,1	—	%0,5	27 Oca 2025
34İzleyin	CVE-2024-58280İstismar yok	CMSimple 5.15 Remote Command Execution via Extensions Configurationcmsimple · cmsimple · CWE-403 RCE	Yüksek8,6	—	%0,9	10 Ara 2025
34İzleyin	CVE-2021-47735İstismar yok	CMSimple 5.4 Authenticated Remote Code Execution via Template Editingcmsimple · cmsimple · CWE-94 RCE CSRF	Yüksek8,6	—	%0,9	23 Ara 2025
34İzleyin	CVE-2021-47734İstismar yok	CMSimple 5.4 Authenticated Local File Inclusion Remote Code Executioncmsimple · cmsimple · CWE-98 RCE	Yüksek8,6	—	%0,8	23 Ara 2025
33İzleyin	CVE-2008-2650Kavram kanıtı	Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when register_globals is enabled, allows remote attackers to include cmsimple · cmsimple · CWE-22 pre-auth RCE Yol geçişi	Orta6,8	—	%18,8	10 Haz 2008
30İzleyin	CVE-2024-57549İstismar yok	CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a GET request.cmsimple · cmsimple · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%0,7	27 Oca 2025
30İzleyin	CVE-2024-57546İstismar yok	An issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the validate link function.cmsimple · cmsimple · CWE-922 Kimlik doğrulamasız	Yüksek7,5	—	%0,6	27 Oca 2025
30İzleyin	CVE-2024-57547İstismar yok	Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the Fcmsimple · cmsimple · CWE-732 Kimlik doğrulamasız	Yüksek7,5	—	%0,6	27 Oca 2025
29İzleyin	CVE-2024-33423İstismar yok	Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML vicmsimple · cmsimple · CWE-80 pre-auth RCE XSS	Yüksek7,4	—	%0,6	1 May 2024
28İzleyin	CVE-2024-32345İstismar yok	A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML cmsimple · cmsimple · CWE-79 pre-auth RCE XSS	Yüksek7,2	—	%0,5	17 Nis 2024
27İzleyin	CVE-2024-32344İstismar yok	A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML cmsimple · cmsimple · CWE-79 RCE XSS	Orta6,8	—	%0,5	17 Nis 2024
24İzleyin	CVE-2024-33424İstismar yok	A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML cmsimple · cmsimple · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	1 May 2024
21İzleyin	CVE-2021-43742İstismar yok	CMSimple 5.4 is vulnerable to Cross Site Scripting (XSS) via the file upload feature.cmsimple · cmsimple · CWE-79 XSS	Orta5,4	—	%0,6	13 Nis 2022
20İzleyin	CVE-2021-47732İstismar yok	CMSimple 5.2 Stored Cross-Site Scripting via Filebrowser External Inputcmsimple · cmsimple · CWE-79 XSS	Orta5,1	—	%0,3	23 Ara 2025
20İzleyin	CVE-2021-47733İstismar yok	CMSimple 5.4 Cross-Site Scripting via HTML Unicode Encodingcmsimple · cmsimple · CWE-79 RCE XSS	Orta5,1	—	%0,3	23 Ara 2025
19İzleyin	CVE-2018-19508İstismar yok	CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI.cmsimple · cmsimple · CWE-79 XSS	Orta4,8	—	%0,6	19 Ara 2018
19İzleyin	CVE-2018-19507İstismar yok	CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI.cmsimple · cmsimple · CWE-79 XSS	Orta4,8	—	%0,6	19 Ara 2018
18İzleyin	CVE-2024-32392İstismar yok	Cross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute arbitrary code via the functions.php component.cmsimple · cmsimple · CWE-79 RCE XSS	Orta4,5	—	%0,8	19 Nis 2024
17İzleyin	CVE-2014-2219İstismar yok	Cross-site scripting (XSS) vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier, possibly as downloaded before February 26cmsimple · cmsimple classic · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%1,2	20 Mar 2014

CVE-2021-43741
40Planlayın
CMSimple 5.4 is vulnerable to Directory Traversal.
KritikCVSS 9,8İstismar yokEPSS %5
- pre-auth RCE
- Yol geçişi
cmsimple · cmsimple13 Nis 2022
CVE-2024-57548
36İzleyin
CMSimple 5.16 allows the user to edit log.php file via print page.
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
cmsimple · cmsimple27 Oca 2025
CVE-2024-58280
34İzleyin
CMSimple 5.15 Remote Command Execution via Extensions Configuration
YüksekCVSS 8,6İstismar yokEPSS %1
- RCE
cmsimple · cmsimple10 Ara 2025
CVE-2021-47735
34İzleyin
CMSimple 5.4 Authenticated Remote Code Execution via Template Editing
YüksekCVSS 8,6İstismar yokEPSS %1
- RCE
- CSRF
cmsimple · cmsimple23 Ara 2025
CVE-2021-47734
34İzleyin
CMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution
YüksekCVSS 8,6İstismar yokEPSS %1
- RCE
cmsimple · cmsimple23 Ara 2025
CVE-2008-2650
33İzleyin
Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when register_globals is enabled, allows remote attackers to include
OrtaCVSS 6,8Kavram kanıtıEPSS %19
- pre-auth RCE
- Yol geçişi
cmsimple · cmsimple10 Haz 2008
CVE-2024-57549
30İzleyin
CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a GET request.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
cmsimple · cmsimple27 Oca 2025
CVE-2024-57546
30İzleyin
An issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the validate link function.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
cmsimple · cmsimple27 Oca 2025
CVE-2024-57547
30İzleyin
Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the F
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
cmsimple · cmsimple27 Oca 2025
CVE-2024-33423
29İzleyin
Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML vi
YüksekCVSS 7,4İstismar yokEPSS %1
- pre-auth RCE
- XSS
cmsimple · cmsimple1 May 2024
CVE-2024-32345
28İzleyin
A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML
YüksekCVSS 7,2İstismar yokEPSS %0
- pre-auth RCE
- XSS
cmsimple · cmsimple17 Nis 2024
CVE-2024-32344
27İzleyin
A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML
OrtaCVSS 6,8İstismar yokEPSS %1
- RCE
- XSS
cmsimple · cmsimple17 Nis 2024
CVE-2024-33424
24İzleyin
A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
cmsimple · cmsimple1 May 2024
CVE-2021-43742
21İzleyin
CMSimple 5.4 is vulnerable to Cross Site Scripting (XSS) via the file upload feature.
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
cmsimple · cmsimple13 Nis 2022
CVE-2021-47732
20İzleyin
CMSimple 5.2 Stored Cross-Site Scripting via Filebrowser External Input
OrtaCVSS 5,1İstismar yokEPSS %0
- XSS
cmsimple · cmsimple23 Ara 2025
CVE-2021-47733
20İzleyin
CMSimple 5.4 Cross-Site Scripting via HTML Unicode Encoding
OrtaCVSS 5,1İstismar yokEPSS %0
- RCE
- XSS
cmsimple · cmsimple23 Ara 2025
CVE-2018-19508
19İzleyin
CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
cmsimple · cmsimple19 Ara 2018
CVE-2018-19507
19İzleyin
CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI.
OrtaCVSS 4,8İstismar yokEPSS %1
- XSS
cmsimple · cmsimple19 Ara 2018
CVE-2024-32392
18İzleyin
Cross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute arbitrary code via the functions.php component.
OrtaCVSS 4,5İstismar yokEPSS %1
- RCE
- XSS
cmsimple · cmsimple19 Nis 2024
CVE-2014-2219
17İzleyin
Cross-site scripting (XSS) vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier, possibly as downloaded before February 26
OrtaCVSS 4,3İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
cmsimple · cmsimple classic20 Mar 2014