| Package | Affected versions | Patched versions |
|---|---|---|
| webedition cms | = 2.9.8.8 |
Webedition CMS v2.9.8.8 contains a remote code execution vulnerability that allows authenticated attackers to inject system commands through PHP page creation. Attackers can create a new PHP page with malicious system commands in the description field to execute arbitrary commands on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free