Description
ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows authenticated attackers to execute arbitrary PHP code by injecting malicious code into the sat_code parameter. Attackers can authenticate, submit a POST request to /modules/system/admin.php?fct=autotasks&op=mod with crafted sat_code containing PHP commands, which creates an executable file that accepts arbitrary commands via GET parameters.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Impresscms | ImpressCMS | 1.4.2 | — |
References
- ExploitDB-50298 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: ImpressCMS 1.4.2 Remote Code Execution via Autotasks third-party-advisory