High severity · published Oct 11, 2021
CVE-2021-40188
PHPFusion 9.03.110 is affected by an arbitrary file upload vulnerability
7.2
CVSS
1.3%
EPSS
No
On KEV
Description
PHPFusion 9.03.110 is affected by an arbitrary file upload vulnerability. The File Manager function in admin panel does not filter all PHP extensions such as ".php, .php7, .phtml, .php5, ...". An attacker can upload a malicious file and execute code on the server.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
Phpfusion · Php-fusion
9.03.110 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-40188
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-40188
Exploit
https://github.com/PHPFusion/PHPFusion/issues/2372
More from Phpfusion
9.8
CVE-2020-37137
PHP-Fusion 9.03.50 - 'panels.php' Eval Injection
9.6
CVE-2020-23754
Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP-Fusion 9.03.50, allows attackers to execute arbitrary code, via the polls feature
8.8
CVE-2023-2453
There is insufficient sanitization of tainted file names that are directly concatenated with a path that is subsequently passed to a ‘require_once’ statement
8.8
CVE-2022-3152
Unverified Password Change in GitHub repository phpfusion/phpfusion prior to 9.10.20
7.2
CVE-2021-40189
PHPFusion 9.03.110 is affected by a remote code execution vulnerability