CVE-2011-0635

Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into…

published January 22, 2011

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter (FTP-Server field) to the sicore/updates/optionssav operation for index.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01919 · 79.6th percentile
Published
2011-01-22T21:00Z
EPSS history
Timeline
  • 22 JAN 21:00Z
    Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into…
    cvelistv5