CyberSecBulletin

Codelyfe vulnerabilities

We track 3 vulnerabilities in Codelyfe products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 18, 2023.

3vulnerabilities
3critical
0high
0exploited
9.6average CVSS score

Latest Codelyfe vulnerabilities

  • 9.1 Critical severity

    Stupid Simple CMS: Improper Authentication

    CVE-2023-6907CodelyfeEPSS 1.2%

    A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation of the ar

  • 9.8 Critical severity

    Stupid Simple CMS: Unrestricted Upload of File with Dangerous Type

    CVE-2023-6902Codelyfe

    A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. This vulnerability affects unknown code of the file /file-manager/upload.php. The manipulation of the argument file leads to unrestricted upload. The exploit h

  • 9.8 Critical severity

    Stupid Simple CMS: Improper Neutralization of Special Elements used in an OS Command

    CVE-2023-6901CodelyfeEPSS 2.86%

    A vulnerability, which was classified as critical, was found in codelyfe Stupid Simple CMS up to 1.2.3. This affects an unknown part of the file /terminal/handle-command.php of the component HTTP POST Request Handler. The manipulation of the argument command w