CVE-2013-10032 Details
Description
An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php endpoint allows authenticated users to upload arbitrary files without proper validation of MIME types or extensions. By uploading a .pht file containing PHP code, an attacker can bypass blacklist-based restrictions and place executable code within the web root. A crafted request using a polyglot or disguised extension allows the attacker to execute the payload by accessing the file directly via the web server. This vulnerability exists due to the use of a blacklist for filtering file types instead of a whitelist.
A remote code execution vulnerability has been identified in GetSimpleCMS version 3.2.1. This issue arises from the upload.php endpoint, which allows authenticated users to upload arbitrary files without adequate validation of MIME types or file extensions. Exploitation involves uploading a .pht file containing PHP code, which can bypass blacklist-based restrictions and execute the payload by accessing the file directly through the web server. The vulnerability is rooted in the application's reliance on a blacklist for file type filtering, rather than a more secure whitelist approach.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 25, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://get-simple.info | [email protected] | Product |
| https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/get_simple_cms_upload_exec.rb | [email protected] | ExploitThird Party Advisory |
| https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=27895 | [email protected] | Third Party Advisory |
| https://www.exploit-db.com/exploits/25405 | [email protected] | ExploitVDB Entry |
| https://www.fortiguard.com/encyclopedia/ips/39295 | [email protected] | Third Party Advisory |
| https://www.vulncheck.com/advisories/getsimple-cms-auth-rce-via-arbitrary-php-file-upload | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-434 | Unrestricted Upload of File with Dangerous Type | [email protected] |
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
| CWE-434 | Unrestricted Upload of File with Dangerous Type | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| get-simple getsimplecms | 3.2.1 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 16, 2026 | CVE Modified | [email protected] |
| Jun 16, 2026 | CVE Modified | CISA-ADP |
| Sep 23, 2025 | Initial Analysis | [email protected] |
| Jul 25, 2025 | New CVE Received | [email protected] |