Critical severity · published Sep 14, 2021
CVE-2021-36581
Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload
9.8
CVSS
1.4%
EPSS
No
On KEV
Description
Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. The server does not verify the extension of the file and the tester was able to upload an aspx to the server.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KC
Kooboo Cms · Kooboo
2.1.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-36581
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-36581
Third Party Advisory
https://github.com/l00neyhacker/CVE-2021-36581/
More from Kooboo Cms
9.8
CVE-2021-36582
In Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and then call upon it to receive a reverse shell from the victim server