CVE-2013-10032

Katalog CVE

CVSS 8.8 · High EPSS 3,7%

Kerentanan Missing Authentication for Critical Function pada get-simple getsimplecms. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows authenticated users to upload arbitrary files without proper validation of MIME types or extensions. By uploading a .pht file containing PHP code, an attacker can bypass blacklist-based restrictions and place executable code within the web root. A crafted request using a polyglot or disguised extension allows the attacker to execute the payload by accessing the file directly via the web server. This vulnerability exists due to the use of a blacklist for filtering file types instead of a whitelist.

Rincian

Terbit di NVD

25 Juli 2025

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function
CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

3,7% peluang dieksploitasi; lebih tinggi dari 89,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/get_simple_c... exploit · advisory pihak ketiga
• https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=27895 advisory pihak ketiga
• https://www.fortiguard.com/encyclopedia/ips/39295 advisory pihak ketiga
• https://www.vulncheck.com/advisories/getsimple-cms-auth-rce-via-arbitrary-php-file-upload advisory pihak ketiga
• https://www.exploit-db.com/exploits/25405 exploit · vdb entry
• https://get-simple.info product