PT-2026-39513 · Unknown · Impresscms

Halit Akaydin · Published 2026-05-10 · Updated 2026-05-10 · CVE-2021-47938

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ImpressCMS version 1.4.2

Description The autotasks administrative interface allows authenticated attackers to execute arbitrary PHP code. This is achieved by injecting malicious code into the sat code parameter via a POST request to the "/modules/system/admin.php?fct=autotasks&op=mod" endpoint. This process creates an executable file that can accept arbitrary commands through GET parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2021-47938

Affected Products

Impresscms

References · 6

• 🔥 https://exploit-db.com/exploits/50298 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47938 · Security Note
• https://impresscms.org · Note
• https://vulncheck.com/advisories/impresscms-remote-code-execution-via-autotasks · Note
• https://impresscms.org/modules/downloads · Note
• https://twitter.com/CVEnew/status/2053537427311255935 · Twitter Post