https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T18:19:53.124020+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-47939 CVE-2021-47939 — Evolution CMS 3.1.6 Authenticated Remote Code Execution via Module Creation 2026-10-15T18:19:53.125193+00:00

Affected: Evolution CMS

Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into module parameters. Attackers can send POST requests to /manager/index.php with malicious PHP code in the 'post' parameter to create modules that execute arbitrary commands when invoked.