Simple Php Cms
Approved changes feed: RSS · Atom
cpe:2.3:a:biggidroid:simple_php_cms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Biggidroid (88cd6943-8b97-51e2-88c8-29572ccf5e48) |
|---|---|
| Product | Simple Php Cms (a062063c-9581-51eb-9be5-7e7c84c9d5a4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-15495 |
vulnerable | 2026-06-08 07:06:36.310053 |
BiggiDroid Simple PHP CMS editsite.php unrestricted upload
MEDIUM (4.7)
A vulnerability was found in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/editsite.php. The manipulation of the argument image results in unrestricted upload. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-01-09T17:02:09.494Z
Updated: 2026-02-23T08:26:22.169Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15263 |
vulnerable | 2026-06-08 07:06:35.961037 |
BiggiDroid Simple PHP CMS Admin Login login.php sql injection
HIGH (7.3)
A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2025-12-30T18:32:09.366Z
Updated: 2026-02-24T06:19:03.796Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15262 |
vulnerable | 2026-06-08 07:06:35.960645 |
BiggiDroid Simple PHP CMS Site Logo edit.php unrestricted upload
MEDIUM (4.7)
A security flaw has been discovered in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/edit.php of the component Site Logo Handler. Performing a manipulation of the argument image results in unrestricted upload. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Published: 2025-12-30T18:02:09.475Z
Updated: 2026-02-24T06:18:45.960Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15169 |
vulnerable | 2026-06-08 07:06:35.826604 |
BiggiDroid Simple PHP CMS editsite.php sql injection
MEDIUM (4.7)
A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected by this issue is some unknown functionality of the file /admin/editsite.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-29T03:02:09.145Z
Updated: 2026-02-24T06:09:57.961Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.