← Database

CVE-2021-40189

HIGH CVSS: 7.2 Published: 2021-10-11 Modified: 2026-06-17

Description

PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "webroot/themes/{Theme Folder], where an attacker can access and execute arbitrary code.

Affected Platforms

Php-Fusion Phpfusion

Weakness Type

CWE-434

References