{"vulnerability": "CVE-2019-11231", "sightings": [{"uuid": "b7771fb4-1f55-43fd-8820-48946264ece4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11231", "type": "exploited", "source": "https://www.exploit-db.com/exploits/46880", "content": "", "creation_timestamp": "2019-05-20T00:00:00.000000Z"}, {"uuid": "b81331c1-1b2b-4a0e-897c-3b4f3c2cb8c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11231", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "2bc576a3-feed-42c1-847e-5e9eb813127b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11231", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:11.000000Z"}, {"uuid": "150545e3-6e9f-465b-8e50-2cafab4a93e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11231", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/getsimplecms_unauth_code_exec.rb", "content": "", "creation_timestamp": "2019-05-16T16:47:53.000000Z"}, {"uuid": "068dbf36-c70c-44eb-ac47-db8cbc9d028e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11231", "type": "published-proof-of-concept", "source": "Telegram/mLEOWN64VqKw_0VE78e17Gu1UFXBsQSVdJfNgYq3VLys3t4", "content": "", "creation_timestamp": "2025-12-20T21:00:05.000000Z"}, {"uuid": "dfaac417-6af4-4d49-8798-8699bded4dd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11231", "type": "seen", "source": "https://t.me/cve_mitre_org/131", "content": "CVE-2019-11231 An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content (PHP code, for example). This vulnerability is ... https://t.co/ZJPWthPr2C\u2014 CVE (@CVEnew) May 22, 2019\n\nMay 22, 2019 at 08:45PM\nvia Twitter https://twitter.com/CVEnew", "creation_timestamp": "2019-05-22T17:48:30.000000Z"}, {"uuid": "51e64b67-fee7-4d9b-aa15-2b67b1be0e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11231", "type": "seen", "source": "https://t.me/hacking_Attack/56938", "content": "How does one manage to write an exploit?\nhttps://www.reddit.com/r/Pentesting/comments/v9fdug/how_does_one_manage_to_write_an_exploit/\n\nOk, this might be a really dumb and broad question and is just for satisfying my curiosity. How does one actually end up writing an exploit? For example, I am reading through CVE-2019-11231 (https://vulmon.com/vulnerabilitydetails?qid=CVE-2019-11231&scoretype=cvssv3). The code can be found here (https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/getsimplecms_unauth_code_exec.rb).  I understand how this exploit works and how it does what it does. What I don't understand is how the author managed to find the vulnerability in this app. Is it far-fetched to assume that they read the source code of the GetSimpleCMS, checked all the other web components (Appache, PHP, etc...) and managed to figure out everything that is written in the exploit?  Are there any of you who write their own exploits? If so, could you please give me more insight on how you manage to do it?  It's just that I am very impressed on how somebody is this skilled and the whole procedure of designing an exploit looks like total black magic to me. :D    submitted by    /u/valjeanjean1  (https://www.reddit.com/user/valjeanjean1) \n [link] (https://www.reddit.com/r/Pentesting/comments/v9fdug/how_does_one_manage_to_write_an_exploit/)   [comments] (https://www.reddit.com/r/Pentesting/comments/v9fdug/how_does_one_manage_to_write_an_exploit/)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:36.545591Z"}, {"uuid": "75faabbb-751e-4cc1-83e1-d02c4c2dff0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-11231", "type": "seen", "source": "https://t.me/hacking_Attack/56938", "content": "How does one manage to write an exploit?\nhttps://www.reddit.com/r/Pentesting/comments/v9fdug/how_does_one_manage_to_write_an_exploit/\n\nOk, this might be a really dumb and broad question and is just for satisfying my curiosity. How does one actually end up writing an exploit? For example, I am reading through CVE-2019-11231 (https://vulmon.com/vulnerabilitydetails?qid=CVE-2019-11231&scoretype=cvssv3). The code can be found here (https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/getsimplecms_unauth_code_exec.rb).  I understand how this exploit works and how it does what it does. What I don't understand is how the author managed to find the vulnerability in this app. Is it far-fetched to assume that they read the source code of the GetSimpleCMS, checked all the other web components (Appache, PHP, etc...) and managed to figure out everything that is written in the exploit?  Are there any of you who write their own exploits? If so, could you please give me more insight on how you manage to do it?  It's just that I am very impressed on how somebody is this skilled and the whole procedure of designing an exploit looks like total black magic to me. :D    submitted by    /u/valjeanjean1  (https://www.reddit.com/user/valjeanjean1) \n [link] (https://www.reddit.com/r/Pentesting/comments/v9fdug/how_does_one_manage_to_write_an_exploit/)   [comments] (https://www.reddit.com/r/Pentesting/comments/v9fdug/how_does_one_manage_to_write_an_exploit/)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:47.092509Z"}]}