Locked Exploits GetSimpleCMS 3.3.15 Remote Code Execution

[1337day-Exploits]

This Metasploit module exploits a remote code execution vulnerability found in GetSimpleCMS versions 3.3.15 and below. An arbitrary file upload (PHPcode for example) vulnerability can be triggered by an authenticated user, however authentication can be bypassed by leaking the cms API key to target the session manager.

This is the hidden content, please

• Sign In
• or
• Sign Up