CVE-2021-47938

🗓️ 10 May 2026 12:43:56Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 3 Views🌐 WEB

Authenticated attackers can trigger remote code execution in ImpressCMS 1.4.2 by injecting PHP into sat_code via POST to autotasks, creating a file that accepts GET commands.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2021-47938	10 May 202612:43	–	attackerkb
CNNVD	ImpressCMS 代码注入漏洞	10 May 202600:00	–	cnnvd
Cvelist	CVE-2021-47938 ImpressCMS 1.4.2 Remote Code Execution via Autotasks	10 May 202612:43	–	cvelist
EUVD	EUVD-2021-34799	10 May 202615:31	–	euvd
NVD	CVE-2021-47938	10 May 202613:16	–	nvd
Positive Technologies	PT-2026-39513	10 May 202600:00	–	ptsecurity
Vulnrichment	CVE-2021-47938 ImpressCMS 1.4.2 Remote Code Execution via Autotasks	10 May 202612:43	–	vulnrichment

Vulners

CNA

Node

impresscms impresscmsMatch1.4.2

[
  {
    "vendor": "Impresscms",
    "product": "ImpressCMS",
    "versions": [
      {
        "version": "1.4.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/impresscms-remote-code-execution-via-autotasks
exploit-db	www.exploit-db.com/exploits/50298
impresscms	www.impresscms.org/
impresscms	www.impresscms.org/modules/downloads/

Parameter	Position	Path	Description	CWE
sat_code	request body	/modules/system/admin.php?fct=autotasks&op=mod	Authenticated RCE: crafted sat_code in POST to autotasks endpoint allows execution of PHP commands and creates an executable file that accepts commands via GET.	CWE-94

12 May 2026 14:24Current

6.6Medium risk

Vulners AI Score6.6

CVSS 48.7

CVSS 3.18.8

EPSS0.0027

SSVC

CWE-94