CVE-2021-42897: Feminer Wms Project Feminer Wms

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

A remote command execution (RCE) vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $_POST[r_name] is directly passed into the $mysqlstr and is executed by exec.

Affected products

• Feminer Wms Project Feminer Wms: version 1.0 only

Published 2022-05-16. Last modified 2026-06-17.