Security Advisory
CVE-2021-40189
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "webroot/themes/{Theme Folder], where an attacker can access and execute arbitrary code.