CyberRota Analysis
Saldırganın giriş yapmış olması gerekebilir. Uzaktan istismar edilebilir olabilir.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Detected Signals
remote code execution code execution
External Security References
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2021-47937
Severity
HIGH
CVSS
8.8
EPSS
0.30%
Original NVD Description
e107 CMS 2.3.0 contains a remote code execution vulnerability that allows authenticated users with theme installation permissions to execute arbitrary commands by uploading malicious theme files. Attackers can upload a crafted theme package through the theme.php endpoint that deploys a web shell to the e107_themes directory, then execute system commands via the payload.php script.