CVE-2021-47939 - Vulnerability Analysis

Overview

Evolution CMS 3.1.6 contains a remote code execution caused by PHP code injection in module parameters via POST requests to /manager/index.php, letting authenticated users with module creation permissions execute arbitrary system commands.

Severity & Score

Impact

Authenticated users with module creation permissions can execute arbitrary system commands, potentially leading to full system compromise.

Mitigation

Update to the latest version of Evolution CMS.

References

• https://www.vulncheck.com/advisories/evolution-cms-authenticated-remote-code-execution-via-module-creation
• https://evo.im/
• https://github.com/evolution-cms/evolution/releases
• https://www.exploit-db.com/exploits/50296

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner