CVE-2021-46367

RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel

published April 8, 2022

CVSS
—
EPSS
30%
Percentile
98.2
In the wild
Unconfirmed
What it is

RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel. An authenticated attacker can upload a PHP file and bypass the .htacess configuration to deny execution of .php files in media and files directory by default.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.29715 · 98.2th percentile
Published
2022-04-08T12:00Z
EPSS history
Timeline
  • 08 APR 12:00Z
    RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel
    cvelistv5