CVE-2021-47943
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files via the file upload functionality. Attackers can upload a PHP shell via the Files section and execute commands by accessing the uploaded file with GET parameters passed to the system function.
Risk Assessment
An authenticated attacker can gain full control over the CMS server, compromising data confidentiality, integrity, and availability.
Recommendation
Immediately upgrade TextPattern CMS to the latest version and restrict file upload permissions.
Other vulnerabilities in TextPattern CMS
See all- CVE-2021-47976High
TextPattern CMS version 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upload functionality. Attackers can authenticate, retrieve a CSRF token from the plugin event page, and upload malicious PHP files to the textpattern/tmp/ directory for code execution.
- CVE-2023-36220High
Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access to sensitive information via the plugin Upload function.
Original NVD description (English source)
TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by uploading malicious PHP files through the file upload functionality. Attackers can upload a PHP shell via the Files section in the content area and execute commands by accessing the uploaded file at /textpattern/files/ with GET parameters passed to the system function.