PT-2023-32557 · Unknown · Getsimple Cms

Testvul

·

CVE-2023-6188

·

Published

2023-11-17

·

Updated

2024-05-17

CVSS v2.0

5.8

Medium

VectorAV:N/AC:L/Au:M/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions GetSimpleCMS versions 3.3.16 through 3.4.0a
Description A critical issue affects the processing of the file /admin/theme-edit.php, leading to code injection. The attack can be initiated remotely.
Recommendations For versions 3.3.16 through 3.4.0a, consider restricting access to the /admin/theme-edit.php file until a patch is available. As a temporary workaround, avoid using the theme-edit.php file in the /admin directory to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2023-6188

Affected Products

Getsimple Cms