Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 14/09/2021 Updated: 24/09/2021

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. The server does not verify the extension of the file and the tester was able to upload an aspx to the server.

Vulnerable Product	Search on Vulmon	Subscribe to Product
kooboo kooboo cms 2.1.1.0

CVE-2021-36581

CVE-2021-36581 CVE-2021-36581 Vulnerability type: Remote - file upload Insecure file upload in Kooboo CMS 2110 It is possible to upload any file extension to the server The server does not verify the extension of the file and the tester was able to upload an aspx to the server File upload directory: /Content/Kooboo_BinaryResource/UploadFile

CWE-434 https://github.com/l00neyhacker/CVE-2021-36581/http://kooboo.com https://nvd.nist.gov https://github.com/l00neyhacker/CVE-2021-36581

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-36581

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect