GCVE - cpe:2.3:a:cmsimple-xh:cmsimple

Approved changes feed: RSS · Atom

cpe:2.3:a:cmsimple-xh:cmsimple_xh:1.7.4:*:*:*:*:*:*:*

part: a version: 1.7.4 update: *

Vendor	Cmsimple Xh (`e4d4868b-567d-5c21-a086-8e214d2d4297`)
Product	Cmsimple Xh (`e4e8a806-cb9b-5f49-9feb-3deebcea4564`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-42645`	vulnerable	2026-06-08 05:35:22.405013	Details available CMSimple_XH 1.7.4 is affected by a remote code execution (RCE) vulnerability. To exploit this vulnerability, an attacker must use the "File" parameter to upload a PHP payload to get a reverse shell from the vulnerable host. Published: 2022-05-10T11:14:13.000Z Updated: 2024-08-04T03:38:50.101Z Open on db.gcve.eu Reference links https://github.com/Net-hunter121/CMSimple_XH-Unauth-RCE https://github.com/cmsimple-xh/cmsimple-xh/releases/tag/1.7.5	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.