NVD

Id
7685  
Name
CVE-2011-0635  
Description
Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the ftpserver parameter (FTP-Server field) to the sicore/updates/optionssav operation for index.php.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-01-22  
Modified Date
2011-02-05  
Seq
2011-0635  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
43542 7685 CVE-2011-0635 16016  View
43543 7685 CVE-2011-0635 20110118 Simploo CMS Community Edition - Remote PHP Code Execution Issue  View
43544 7685 CVE-2011-0635 45906  View
43545 7685 CVE-2011-0635 simploocms-ftpserver-code-execution(64826)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33939 JVNDB-2011-004181 Simploo CMS における任意の PHP コードを挿入される脆弱性 Simploo CMS には、静的コードを挿入される不備があるため、config/custom/base.ini.php に任意の PHP コードを挿入される脆弱性が存在します。 CVE-2011-0635 48542 CVE-2011-0635 7685 6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004181.html 2011-01-22 2012-03-27 View