Vulnerabilities (CVE)

Filtered by vendor Dustincowell Subscribe
Filtered by product Free Simple Cms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-3307 1 Dustincowell 1 Free Simple Cms 2024-02-04 7.5 HIGH N/A
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) body, (2) footer, (3) header, (4) menu_left, or (5) menu_right parameter.
CVE-2010-3742 1 Dustincowell 1 Free Simple Cms 2024-02-04 7.5 HIGH N/A
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) meta or (2) phpincdir parameter, a different issue than CVE-2010-3307.