Simple-log Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Simple-log Project records in CISA KEV

No Simple-log Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simple-log 2 records MEDIUM

Records

2 records in Simple-log · all components

TI-2020-13360 CVE-2020-18265 · GHSA-r7g6-pgxg-j883

Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain…

MEDIUM 40

Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=act_add_member".

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01054 Published 2021-06-07 No fix listed CWE-352

TI-2020-13359 CVE-2020-18264 · GHSA-4f7v-wq2f-4f9q

Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain…

MEDIUM 40

Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=act_edit_member".

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01054 Published 2021-06-07 No fix listed CWE-352

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0