GobyVuls/CVE-2022-41544.md
2023-04-13 15:45:23 +08:00

1.2 KiB
Raw Blame History

GetSimpleCMS theme-edit.php content Arbitrary code execution vulnerability (CVE-2022-41544)

Vulnerability GetSimpleCMS theme-edit.php content Arbitrary code execution vulnerability (CVE-2022-41544)
Chinese name GetSimpleCMS 内容管理系统 theme-edit.php 文件 content 参数任意代码执行漏洞CVE-2022-41544
CVSS core 9.8
FOFA Query (click to view the results directly) (body="content=\"GetSimple" || body="Powered by GetSimple")
Number of assets affected 2784
Description GetSimple CMS is a content management system (CMS) written in the PHP language. GetSimple CMS v3.3.16 has a security vulnerability that stems from the discovery of the remote Code execution (RCE) vulnerability through the edited_file parameter in admin/theme-edit.php.
Impact GetSimple CMS v3.3.16 has a security vulnerability that stems from the discovery of the remote Code execution (RCE) vulnerability through the edited_file parameter in admin/theme-edit.php.