Skip to content
OpenAdvisories
Unscored CVE-2021-40189 EUVD-2021-27374GHSA-rqf2-v8fp-54vf

PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "webroot/themes/{Theme F…

Published Oct 11, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "webroot/themes/{Theme Folder], where an attacker can access and execute arbitrary code.

References