Apencms
Monthly
Code injection in mtrano APENCMS (rolling release, all builds up to commit 6546096d354153309693efabb9a0d824628ed4f5) lets a remote attacker who already holds high-privilege template or site administration access reach a PHP eval() call in cms/weasel.php through the $_CMS['site'] argument and execute arbitrary code on the server. Publicly available exploit code exists, while the vendor was contacted and did not respond, so no fixed build and no published version boundaries are available. The CNA's CVSS 4.0 base score of 1.9 (Low, all impacts rated VC:L/VI:L/VA:L) understates the technical severity: with attacker-controlled input flowing into eval(), successful exploitation is effectively full server-side code execution, and the attacker must already control the template/site variable (PR:H), consistent with template or site administrator rights rather than an unauthenticated default-configuration attack.
Code injection in mtrano APENCMS (rolling release, all builds up to commit 6546096d354153309693efabb9a0d824628ed4f5) lets a remote attacker who already holds high-privilege template or site administration access reach a PHP eval() call in cms/weasel.php through the $_CMS['site'] argument and execute arbitrary code on the server. Publicly available exploit code exists, while the vendor was contacted and did not respond, so no fixed build and no published version boundaries are available. The CNA's CVSS 4.0 base score of 1.9 (Low, all impacts rated VC:L/VI:L/VA:L) understates the technical severity: with attacker-controlled input flowing into eval(), successful exploitation is effectively full server-side code execution, and the attacker must already control the template/site variable (PR:H), consistent with template or site administrator rights rather than an unauthenticated default-configuration attack.