CVE-2021-47900Disclosure

MEDIUMCVSS 9.3 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Patch affected systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Gila CMS versions prior to 2.0.0 contain a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands through manipulated HTTP headers. Attackers can inject PHP code in the User-Agent header with shell_exec() to run system commands by sending crafted requests to the admin endpoint.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-98

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://cvefind.com/CVE-2021-47900

Full discourse1 post

CVEFind.com@CveFindCom254d
Disclosure
[CVE-2021-47900: CRITICAL] Warning: Gila CMS < 2.0.0 has a critical remote code execution flaw. Attackers exploit it by injecting PHP into User-Agent header to execute system commands. Update to secure.#cve,CVE-2021-47900,#cybersecurity https://cvefind.com/CVE-2021-47900
Post summary
The post discloses a critical remote code execution vulnerability (CVE-2021-47900) affecting Gila CMS <2.0.0. It alerts that attackers can inject PHP via the User-Agent header to run system commands and urges users to apply updates.
0000091
584 followersView on X

Explore more

Back to dashboard