CVE-2021-47736
HIGHCMSimple_XH 1.7.4 - Authenticated Remote Code Execution via Content Editing
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-47736. PoCs published by Halit AKAYDIN.
AI-analyzed exploit summary This exploit targets CMSimple_XH 1.7.4, leveraging an authenticated RCE vulnerability by injecting a PHP payload into a misconfigured backup page. It requires valid credentials and creates a backdoor file for command execution.
Description
CMSimple_XH 1.7.4 contains an authenticated remote code execution vulnerability in the content editing functionality that allows administrative users to upload malicious PHP files. Attackers with valid credentials can exploit the CSRF token mechanism to create a PHP shell file that enables arbitrary command execution on the server.
Exploits (1)
This exploit targets CMSimple_XH 1.7.4, leveraging an authenticated RCE vulnerability by injecting a PHP payload into a misconfigured backup page. It requires valid credentials and creates a backdoor file for command execution.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H