CVE-2021-47938

Name of the Vulnerable Software and Affected Versions ImpressCMS version 1.4.2

Description Remote code execution is possible in the autotasks administrative interface. Authenticated attackers can execute arbitrary PHP code by injecting malicious content into the sat code parameter. This is achieved by sending a POST request to the '/modules/system/admin.php?fct=autotasks&op=mod' endpoint with a manipulated sat code containing PHP commands, which results in the creation of an executable file that accepts arbitrary commands via GET parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the '/modules/system/admin.php?fct=autotasks&op=mod' endpoint or avoid using the sat code parameter to minimize the risk of exploitation.