CVE-2021-20850
N/A
N/A
Summary
PowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, and PowerCMS 2 Series (End-of-Life, EOL) allows a remote attacker to execute an arbitrary OS command via unspecified vectors.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Alfasado Inc. | PowerCMS XMLRPC API | PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, PowerCMS 2 Series (End-of-Life, EOL) | affected |
Weaknesses
- OS Command Injection
ADP Enrichment
CVE Program Container
Additional References
- https://www.powercms.jp/news/release-patch-xmlrpc-api-202110.html
- https://jvn.jp/en/jp/JVN17645965/index.html
References
- https://www.powercms.jp/news/release-patch-xmlrpc-api-202110.html
- https://jvn.jp/en/jp/JVN17645965/index.html
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.