Sourceforge Vulnerabilities and Affected Products
Vulnerabilities associated with SimplePress CMS.
Products
Clear product- 202CMS2 vulnerabilities
- Data Center Audit2 vulnerabilities
- Easyndexer2 vulnerabilities
- Echo Mirage1 vulnerability
- GPS Tracking System1 vulnerability
- Meneame English Pligg1 vulnerability
- OpenBiz Cubi Lite1 vulnerability
- phpFileManager1 vulnerability
- Placeto CMS1 vulnerability
- SimplePress CMS1 vulnerability
- Snes9K 0.0.9z1 vulnerability
- SoX - Sound eXchange1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-25575HIGH | SimplePress CMS 1.0.7 SQL Injection via p and s ParametersSimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'p' and 's' parameters. Attackers can send GET requests with crafted SQL payloads to extract sensitive database information including usernames, database names, and version details. CWE-89Mar 21, 2026 | CVSS8.8v4.0 | EPSS0.338% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |