GetSimple RCE (CVE-2021-28976)

What is GetSimple? 

GetSimple is an XML-based, stand-alone, fully independent and lite Content Management System. To go along with its best-in-class user interface, we have loaded it with features that every website needs, but with nothing, it doesn't. GetSimple is truly the simplest way to manage a small-business website.

What is CVE-2022-27061? 

GetSimple CMS v0.1.1 and below are vulnerable to containing a Remote Code Execution (RCE) vulnerability via file upload functionality.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-27061

Lab Environment 

In this lab environment, the user is going to get access to a Kali GUI instance. A GetSimple CMS instance vulnerable to Arbitrary File Upload which leads to Remote Code Execution (RCE), identified by CVE-2022-27061, is running on the target server. It can be accessed using the tools installed on Kali at http://demo.ine.local. 

Objective: Leverage the vulnerable GetSimple instance to exploit the file upload vulnerability as an authenticated user and execute a command/code on the target server. 

The following credentials might be helpful: 

Username: admin

Password: password 

Instructions: 

• This lab is dedicated to you! No other users are on this network :) 

• Once you start the lab, you will have access to a root terminal of a Kali instance

• Your Kali has an interface with IP address 192.X.Y.2. Run "ip addr" to know the values of X and Y.

• The target application should be accessible at http://demo.ine.local. 

• Do not attack the gateway located at IP address 192.X.Y.1