CyberRota Analysis
AI-GeneratedMaxSite CMS is vulnerable to a critical remote code execution flaw that allows unauthenticated attackers to inject arbitrary PHP code into the application’s configuration file via specially crafted POST requests. This vulnerability enables attackers to execute malicious PHP statements persistently, compromising the web server's integrity and potentially leading to full system control. Organizations using MaxSite CMS should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers to inject arbitrary PHP code into the application configuration file by submitting crafted POST requests to the install endpoint after installation is complete. Attackers can supply a malicious db_dbprefix value containing a single quote to break out of a PHP string literal in application/config/database.php, appending attacker-controlled PHP statements that are executed by the web server on every subsequent request, resulting in persistent unauthenticated remote code execution as the web-server process user.