Skip to content
Threat Feed

Tag

Cve-2021-47939

1 brief RSS
high advisory

Evolution CMS Authenticated Remote Code Execution via Module Creation (CVE-2021-47939)

Evolution CMS version 3.1.6 is vulnerable to remote code execution, where authenticated users with module creation permissions can inject PHP code into module parameters, allowing them to execute arbitrary system commands by sending POST requests to '/manager/index.php' with malicious PHP code in the 'post' parameter to create modules that execute arbitrary commands when invoked, as tracked by CVE-2021-47939.

Evolution CMS 3.1.6 cve cve-2021-47939 rce code-injection
2r 1t 1c