CVE-2010-3307
Free Simple CMS <1.0 - RCE
Title source: llmDescription
Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Free Simple CMS 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) body, (2) footer, (3) header, (4) menu_left, or (5) menu_right parameter.
Exploits (1)
Scores
EPSS
0.0099
EPSS Percentile
77.0%
Details
CWE
CWE-94
Status
published
Products (1)
dustincowell/free_simple_cms
1.0
Published
Oct 05, 2010
Tracked Since
Feb 18, 2026