CVE-2021-47918

HIGH

8.1

Beschreibung

Simple CMS 2.1 contains a remote SQL injection vulnerability that allows privileged attackers to inject unfiltered SQL commands in the users module. Attackers can exploit unvalidated input parameters in the admin.php file to compromise the database management system and web application.

CVE Details

CVSS v3.1 Bewertung8.1

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht2/1/2026

Zuletzt geandert2/11/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

simplephpscripts:simple_cms_php

Schwachen (CWE)

CWE-89

Referenzen

https://simplephpscripts.com/simple-cms-php(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/simple-cms-sql-injection-vulnerability-via-users-module2(disclosure@vulncheck.com)

https://www.vulnerability-lab.com/get_content.php?id=2303(disclosure@vulncheck.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.