Evolution CMS Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Evolution CMS versions through 3.1.6. This vulnerability allows authenticated users with module creation permissions to execute arbitrary system commands. Exploitation involves injecting PHP code into module parameters and sending POST requests to the manager index. The injected code is executed when the module is invoked.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where Evolution CMS is hosted.

Reproduction

To reproduce this vulnerability, an authenticated user with module creation permissions can inject PHP code into the 'post' parameter while creating a new module. Once the module is saved, the injected code will be executed when the module is run.

Remediation

Users are advised to update to Evolution CMS version 3.5.6, which addresses this vulnerability.