PT-2023-32557 · Unknown · Getsimple Cms

Testvul

·

CVE-2023-6188

·

Publicado

2023-11-17

·

Atualizado

2024-05-17

CVSS v2.0

5.8

Média

VetorAV:N/AC:L/Au:M/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions GetSimpleCMS versions 3.3.16 through 3.4.0a
Description A critical issue affects the processing of the file /admin/theme-edit.php, leading to code injection. The attack can be initiated remotely.
Recommendations For versions 3.3.16 through 3.4.0a, consider restricting access to the /admin/theme-edit.php file until a patch is available. As a temporary workaround, avoid using the theme-edit.php file in the /admin directory to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2023-6188

Produtos afetados

Getsimple Cms