CVE-2021-47736: CMSimple_XH 1.7.4 Authenticated Remote Code Execution via Content Editing
CMSimpleXH 1.7.4 contains an authenticated remote code execution vulnerability in the content editing functionality that allows administrative users to upload malicious PHP files. Attackers with valid credentials can exploit the CSRF token mechanism to create a PHP shell file that enables arbitrary command execution on the server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
CMSimple_XHto a version that resolves this vulnerability.Fixed in 1.7.4 - Compensating control
Mitigate by restricting access to the CMSimple_XH administrative content editing functionality so only trusted administrative users can edit/upload content.
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47736?
CVE-2021-47736 is considered a critical vulnerability due to its potential for authenticated remote code execution.
How does CVE-2021-47736 allow an attacker to exploit the system?
CVE-2021-47736 allows an attacker with valid administrative credentials to exploit the CSRF token mechanism to upload malicious PHP files.
What software is affected by CVE-2021-47736?
CVE-2021-47736 affects CMSimple_XH version 1.7.4.
How can I mitigate the risk associated with CVE-2021-47736?
To mitigate CVE-2021-47736, ensure that your CMSimple_XH installation is updated to a secure version that addresses this vulnerability.
Who can be impacted by CVE-2021-47736?
Administrators of CMSimple_XH 1.7.4 can be impacted by CVE-2021-47736 as it targets users with valid credentials.