Vulnerabilities
14 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2021-47918 | Simple CMS 2.1 contains a remote SQL injection vulnerability that allows privileged attackers to inject unfiltered SQL commands in the users module. Simple CMS 2.1 contains a remote SQL injection vulnerability that allows privileged attackers to inject unfiltered SQL commands in the users module. Attackers can exploit unvalidated input parameters in the admin.php file to compromise the database management system and web application. NVD description · AI analysis pending | 8.6 group max | <1% | PoC |
| — | |
| CVE-2023-3540 | A vulnerability, which was classified as problematic, was found in SimplePHPscripts NewsLetter Script PHP 2.4. A vulnerability, which was classified as problematic, was found in SimplePHPscripts NewsLetter Script PHP 2.4. Affected is an unknown function of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-233292. NVD description · AI analysis pending | 6.1 | <1% |
| — | ||
| CVE-2023-3539 | A vulnerability, which was classified as problematic, has been found in SimplePHPscripts Simple Forum PHP 2.7. A vulnerability, which was classified as problematic, has been found in SimplePHPscripts Simple Forum PHP 2.7. This issue affects some unknown processing of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-233291. NVD description · AI analysis pending | 6.1 | <1% |
| — | ||
| CVE-2023-3538 | A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-233290 is the identifier assigned to this vulnerability. NVD description · AI analysis pending | 5.4 | <1% |
| — | ||
| CVE-2023-3537 | A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-233289 was assigned to this vulnerability. NVD description · AI analysis pending | 6.1 | <1% |
| — | ||
| CVE-2023-3536 | A vulnerability was found in SimplePHPscripts Funeral Script PHP 3.1. A vulnerability was found in SimplePHPscripts Funeral Script PHP 3.1. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-233288. NVD description · AI analysis pending | 6.1 | <1% |
| — | ||
| CVE-2023-3535 | A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-233287. NVD description · AI analysis pending | 6.1 | <1% |
| — | ||
| CVE-2023-3476 | A vulnerability was found in SimplePHPscripts GuestBook Script 2.2. A vulnerability was found in SimplePHPscripts GuestBook Script 2.2. It has been classified as problematic. This affects an unknown part of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-232755. NVD description · AI analysis pending | 6.1 | <1% |
| — | ||
| CVE-2023-3475 | A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. It is recommended to upgrade the affected component. VDB-232754 is the identifier assigned to this vulnerability. NVD description · AI analysis pending | 6.1 | <1% |
| — | ||
| CVE-2023-3474 | A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. It is recommended to upgrade the affected component. The identifier VDB-232753 was assigned to this vulnerability. NVD description · AI analysis pending | 6.1 | <1% |
| — | ||
| CVE-2023-3465 +1 in the same advisory: …3464 | A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file user.php of the component HTTP POST Request Handler. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-232711. NVD description · AI analysis pending | 6.1 | <1% |
| — |