GetSimple CMS 'api.php' XML External Entity Information Disclosure Vulnerability
BID:71844
Info
GetSimple CMS 'api.php' XML External Entity Information Disclosure Vulnerability
| Bugtraq ID: | 71844 |
| Class: | Design Error |
| CVE: |
CVE-2014-8790 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 31 2014 12:00AM |
| Updated: | Dec 31 2014 12:00AM |
| Credit: | Egidio Romano |
| Vulnerable: |
GetSimple GetSimple CMS 3.3.4 GetSimple GetSimple CMS 3.3.3 GetSimple GetSimple CMS 3.3.2 GetSimple GetSimple CMS 3.3.1 GetSimple GetSimple CMS 3.3 GetSimple GetSimple CMS 3.2.3 GetSimple GetSimple CMS 3.2.2 GetSimple GetSimple CMS 3.2.1 GetSimple GetSimple CMS 3.2 GetSimple GetSimple CMS 3.1.2 GetSimple GetSimple CMS 3.1.1 |
| Not Vulnerable: |
GetSimple GetSimple CMS 3.3.5 Beta 1 |
Exploit / POC
GetSimple CMS 'api.php' XML External Entity Information Disclosure Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.