CVE-2021-40189

PHPFusion 9.03.110 is affected by a remote code execution vulnerability

published October 11, 2021

CVSS
—
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "webroot/themes/{Theme Folder], where an attacker can access and execute arbitrary code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01803 · 78.4th percentile
Published
2021-10-11T18:27Z
EPSS history
Timeline
  • 11 OCT 18:27Z
    PHPFusion 9.03.110 is affected by a remote code execution vulnerability
    cvelistv5