CVE-2011-0635: Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to i...

Security readout for executives and security teams

CVE-2011-0635 affects Simploo CMS 1.7.1 and earlier. An authenticated remote user could place PHP code into a configuration file through an update options field, potentially allowing server-side code execution. This is mainly urgent for organizations still running this legacy CMS or inherited websites. Exposure is likely limited to legacy Simploo CMS deployments, especially version 1.7.1 or earlier. Public-facing installations with multiple administrator or editor accounts carry higher risk because exploitation requires authenticated access, not anonymous access. Prioritize if any active site still runs Simploo CMS. This is old software with public exploit references and potential code execution impact, but urgency depends on whether the organization has exposed Simploo CMS and who can authenticate to it. Mitigation focus: Inventory websites for Simploo CMS 1.7.1 or earlier.; Check vendor or maintainer guidance for an upgrade or security fix.; Restrict CMS administrative access to trusted networks and users..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.