CVE-2021-47939 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
May 10, 2026
Last Seen
May 10, 2026

CVE-2021-47939 is a vulnerability tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed May 10, 2026; most recent activity May 10, 2026.

Related Threat Clusters

Recent Intelligence Reports

  • CVE-2021-47939 CVE Vulnerability Disclosures / 6h Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into module parameters. Attackers can send POST requests to /manager/index.php with malicious PHP code in the 'post' parameter to create modules that execute arbitrary commands when invoked. — cve.report · May 10, 2026
  • CVE-2021-47939 - Exploits & Severity — Feedly · May 10, 2026

Related Entities

Zero-day Exploit CWE-94 - Code Injection T1059 - Command and Scripting Interpreter T1505.003 - Web Shell Evolution CMS Evolution CMS 3.1.6 PHP Code Injection In Module Parameters

CVSS v3.1 Breakdown