Approved changes feed: RSS · Atom

cpe:2.3:a:get-simple:getsimple_cms:3.3.4:*:*:*:*:*:*:*

part: a version: 3.3.4 update: *

VendorGet Simple (8352e898-cb94-58b7-81e1-dfef9dc059d7)
ProductGetsimple Cms (efad63c5-f159-58a2-a24e-fc03bb2a628a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/getsimplecms/getsimplecms purl2cpe 2026-06-01 10:16:30.099505

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8723 vulnerable 2026-06-08 05:06:09.902679 Details available
GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) plugins/anonymous_data.php or (2) plugins/InnovationPlugin.php, which reveals the installation path in an error message.
Published: 2017-03-17T14:00:00.000Z
Updated: 2024-08-06T13:26:02.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8722 vulnerable 2026-06-08 05:06:09.902261 Details available
GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<username>.xml, (2) backups/users/<username>.xml.bak, (3) data/other/authorization.xml, or (4) data/other/appid.xml.
Published: 2017-03-17T14:00:00.000Z
Updated: 2024-08-06T13:26:02.556Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.