high7.2
CVE-2021-40189
PHPFusion 9.03.110 is affected by a remote code execution vulnerability.
Impact
PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "webroot/themes/{Theme Folder], where an attacker can access and execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php-Fusion | Phpfusion | Version 9.03.110 |