Beveiligingsadvies

CVE-2021-47964

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-15 18:36:30

Laatst bijgewerkt 2026-05-18 16:02:50

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious extension packages through the block manager. Attackers can upload a crafted ZIP file containing PHP code in the packageinfo.inc file and trigger execution by accessing the About tab of the installed extension.

← Alle CVE's bekijken Bekijk op cve.org ↗