Lucene search
HistoryJan 20, 2015 - 3:59 p.m.
CVE-2014-8790
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.0%
XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to read arbitrary files via the data parameter.
Affected configurations
Node
cagintranetworksgetsimple_cmsMatch3.3.3
ORcagintranetworksgetsimple_cmsMatch3.3.4
ORget-simplegetsimple_cmsMatch3.1.1
ORget-simplegetsimple_cmsMatch3.1.2
ORget-simplegetsimple_cmsMatch3.2
ORget-simplegetsimple_cmsMatch3.2.1
ORget-simplegetsimple_cmsMatch3.2.2
ORget-simplegetsimple_cmsMatch3.2.3
ORget-simplegetsimple_cmsMatch3.3.0
ORget-simplegetsimple_cmsMatch3.3.1
ORget-simplegetsimple_cmsMatch3.3.2b3
Related
prion
prion
Xxe
2015-01-20 15:59:00
packetstorm
packetstorm
GetSimple CMS 3.3.4 XML External Entity Injection
2014-12-31 00:00:00
cvelist
cvelist
CVE-2014-8790
2015-01-20 15:00:00
zdt
zdt
GetSimple CMS 3.3.4 XML External Entity Injection Vulnerability
2015-01-01 00:00:00
cve
cve
CVE-2014-8790
2015-01-20 15:59:02
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.7 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.0%
Related for NVD:CVE-2014-8790