Skip to content
Threat Feed

Tag

Authenticated

1 brief RSS
high advisory

CVE-2021-47937: e107 CMS Authenticated Remote Code Execution via Theme Upload

e107 CMS 2.3.0 contains a remote code execution vulnerability (CVE-2021-47937) that allows authenticated users with theme installation permissions to execute arbitrary commands by uploading malicious theme files, leading to arbitrary code execution on the server.

e107 CMS 2.3.0 cve rce e107 web-shell authenticated CVE-2021-47937
2r 2t 1c