vendor:
Zimplit CMS
by:
KedAns-Dz
7,5
CVSS
HIGH
Multiple Vulnerabilities
N/A
CWE
Product Name: Zimplit CMS
Affected Version From: 3.0
Affected Version To: 3.0
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: GNU/Linux Ubuntu_10.10
N/A
Zimplit CMS v3.0 <= (FU/XSRF/LFI) Multiple Vulnerabilities
Zimplit CMS is prone to multiple local file-include vulnerabilities and an arbitrary file-upload vulnerability. An attacker can exploit these issues to upload arbitrary files onto the web server, execute arbitrary local files within the context of the web server, and obtain sensitive information.
Mitigation:
N/A