CVE-2021-47938

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

May 10, 2026

Last Seen

May 10, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Remote Code Execution Vulnerability in Evolution CMS Disclosed67.5

A remote code execution vulnerability (CVE-2021-47939) has been identified in Evolution CMS 3.1.6, allowing authenticated users with module creation permissions to execute arbitrary system commands. The vulnerability is exploited by sending POST requests to /manager/index.php with malicious PHP code...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Remote Code Execution Vulnerability in Evolution CMS Disclosed

May 10·7 sources

Related Articles (2)

CVE-2021-47938 CVE Vulnerability Disclosures / 7h ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows authenticated attackers to execute arbitrary PHP code by injecting malicious code into the sat_code parameter. Attackers can authenticate, submit a POST request to /modules/system/admin.php?fct=autotasks&op=mod with crafted sat_code containing PHP commands, which creates an executable file that accepts arbitrary commands via GET p

cve.report·May 10

CVE-2021-47938 - Exploits & Severity

Related Entities

Zero-day Exploit CWE-94 - Code Injection T1059 - Command and Scripting Interpreter T1505.003 - Web Shell ImpressCMS