EIP-2026-107391
PRE-CVEGetsimple CMS 2.01 < 2.02 - Administrative Credentials Disclosure
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-107391. PoCs published by Michael Brooks.
AI-analyzed exploit summary This writeup details an information disclosure vulnerability in GetSimple CMS versions 2.01 and 2.02, where administrative credentials and other sensitive data are stored in unprotected XML files. The researcher explains the lack of access controls and the triviality of cracking the SHA1 password hashes.
Description
Getsimple CMS 2.01 < 2.02 - Administrative Credentials Disclosure
Exploits (1)
This writeup details an information disclosure vulnerability in GetSimple CMS versions 2.01 and 2.02, where administrative credentials and other sensitive data are stored in unprotected XML files. The researcher explains the lack of access controls and the triviality of cracking the SHA1 password hashes.