NetSight
high7.2

CVE-2021-25857

An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code via the font_type parameter to setup.php.

Impact

An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code via the font_type parameter to setup.php.

Affected products

VendorProductAffected versions
Supermicro-Cms ProjectSupermicro-Cms
Version 3.11

References