Skip to content
Threat Feed

Product

ImpressCMS 1.4.2

1 brief RSS
high advisory

ImpressCMS 1.4.2 Remote Code Execution via Autotasks Interface (CVE-2021-47938)

ImpressCMS 1.4.2 is vulnerable to remote code execution (RCE) via the autotasks administrative interface, where authenticated attackers can inject malicious PHP code into the sat_code parameter via a POST request to /modules/system/admin.php, leading to arbitrary PHP code execution through GET parameters (CVE-2021-47938).

ImpressCMS 1.4.2 code-injection rce impresscms
2r 2t 1c