CVE-2021-36581

2021-09-1411:40:03

mitre

www.cve.org

kooboo cms

insecure file upload

cve-2021-36581

server vulnerability

file extension verification

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

59.7%

JSON

Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. The server does not verify the extension of the file and the tester was able to upload an aspx to the server.

References

kooboo.com

github.com/l00neyhacker/CVE-2021-36581/