{"vulnerability": "cve-2021-47923", "sightings": [{"uuid": "f00a7228-6f77-4f48-a8cb-69bc7003472a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47923", "type": "seen", "source": "https://t.me/shimiscyberworld/1333", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2021-47923 \u2014 CVSS 9.8\nOpenCart 3.0.3.8 Session Fixation Vulnerability (CVE-2021-47923) Rated Critical\n\nCVE-2021-47923 \u2014 OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers to hijack user sessions by injecting arbitrary values into the OCSESSID cookie. At\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2021-47923 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:11.045848Z"}, {"uuid": "d1f671ca-085f-4212-b400-ca35e8f62514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47923", "type": "seen", "source": "https://t.me/shimiscyberworld/1340", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-10\n\n\ud83d\udcca 15 vulnerabilities detected today \u2014 5 \ud83d\udd34 Critical, 10 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2021-47923 (9.8) \u2014 OpenCart 3.0.3.8 Session Fixation Vulnerability\u2026\n  \u2022 CVE-2021-47932 (9.8) \u2014 WordPress TheCartPress Unauthenticated Admin Creation\u2026\n  \u2022 CVE-2021-47933 (9.8) \u2014 WordPress MStore API Critical RCE: Unauthenticated File\u2026\n  \u2022 CVE-2021-47936 (9.8) \u2014 OpenCATS 0.9.4 Critical RCE via Malicious Resume Uploads\n  \u2022 CVE-2021-47940 (9.8) \u2014 WordPress Plugin Download From Files: Critical\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2021-47935 (8.8) \u2014 Sentry 8.2.0 RCE: Authenticated Superusers Can Execute\u2026\n  \u2022 CVE-2021-47937 (8.8) \u2014 e107 CMS RCE (CVE-2021-47937) Allows Authenticated Theme\u2026\n  \u2022 CVE-2021-47938 (8.8) \u2014 ImpressCMS 1.4.2 RCE: Authenticated Attackers Can Execute\u2026\n  \u2022 CVE-2021-47939 (8.8) \u2014 Evolution CMS RCE (CVE-2021-47939) Allows Authenticated\u2026\n  \u2022 CVE-2021-47943 (8.8) \u2014 TextPattern CMS RCE (CVE-2021-47943) Allows Authenticated\u2026\n  \u2022 CVE-2021-47949 (8.8) \u2014 CyberPanel 2.1 RCE via Symlink Attack (CVE-2021-47949)\n  \u2022 CVE-2022-50944 (8.8) \u2014 Aero CMS 0.0.1 Vulnerability Allows Authenticated PHP Code\u2026\n  \u2022 CVE-2021-47928 (8.2) \u2014 Opencart TMD Vendor System Blind SQLi Exposes User Data\n  \u2022 CVE-2021-47930 (8.2) \u2014 CVE-2021-47930: Unauthenticated SQLi in Balbooa Joomla\u2026\n  \u2022 CVE-2021-47941 (8.2) \u2014 WordPress Plugin Survey & Poll SQLi Puts Data at Risk\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:08.149223Z"}, {"uuid": "98823f1a-5081-46d8-bafe-6524614bc331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47923", "type": "seen", "source": "https://t.me/shimiscyberworld/1333", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2021-47923 \u2014 CVSS 9.8\nOpenCart 3.0.3.8 Session Fixation Vulnerability (CVE-2021-47923) Rated Critical\n\nCVE-2021-47923 \u2014 OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers to hijack user sessions by injecting arbitrary values into the OCSESSID cookie. At\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve  #critical  #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2021-47923 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:40.448915Z"}, {"uuid": "3e157e3e-20d2-4914-a5d1-bc9e46716b4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47923", "type": "seen", "source": "https://t.me/shimiscyberworld/1340", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-10\n\n\ud83d\udcca 15 vulnerabilities detected today \u2014 5 \ud83d\udd34 Critical, 10 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2021-47923 (9.8) \u2014 OpenCart 3.0.3.8 Session Fixation Vulnerability\u2026\n  \u2022 CVE-2021-47932 (9.8) \u2014 WordPress TheCartPress Unauthenticated Admin Creation\u2026\n  \u2022 CVE-2021-47933 (9.8) \u2014 WordPress MStore API Critical RCE: Unauthenticated File\u2026\n  \u2022 CVE-2021-47936 (9.8) \u2014 OpenCATS 0.9.4 Critical RCE via Malicious Resume Uploads\n  \u2022 CVE-2021-47940 (9.8) \u2014 WordPress Plugin Download From Files: Critical\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2021-47935 (8.8) \u2014 Sentry 8.2.0 RCE: Authenticated Superusers Can Execute\u2026\n  \u2022 CVE-2021-47937 (8.8) \u2014 e107 CMS RCE (CVE-2021-47937) Allows Authenticated Theme\u2026\n  \u2022 CVE-2021-47938 (8.8) \u2014 ImpressCMS 1.4.2 RCE: Authenticated Attackers Can Execute\u2026\n  \u2022 CVE-2021-47939 (8.8) \u2014 Evolution CMS RCE (CVE-2021-47939) Allows Authenticated\u2026\n  \u2022 CVE-2021-47943 (8.8) \u2014 TextPattern CMS RCE (CVE-2021-47943) Allows Authenticated\u2026\n  \u2022 CVE-2021-47949 (8.8) \u2014 CyberPanel 2.1 RCE via Symlink Attack (CVE-2021-47949)\n  \u2022 CVE-2022-50944 (8.8) \u2014 Aero CMS 0.0.1 Vulnerability Allows Authenticated PHP Code\u2026\n  \u2022 CVE-2021-47928 (8.2) \u2014 Opencart TMD Vendor System Blind SQLi Exposes User Data\n  \u2022 CVE-2021-47930 (8.2) \u2014 CVE-2021-47930: Unauthenticated SQLi in Balbooa Joomla\u2026\n  \u2022 CVE-2021-47941 (8.2) \u2014 WordPress Plugin Survey & Poll SQLi Puts Data at Risk\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:50.880508Z"}]}