CVE-2021-36582

CRITICAL 9.8CVE-2021-36582 · Published 14/09/2021 · updated 09/07/2026

In short

CVE-2021-36582 is a CRITICAL (CVSS 9.8) vulnerability affecting kooboo cms (kooboo).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
kooboo cms kooboo	`= 2.1.1.0`	No fix yet

Description

In Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and then call upon it to receive a reverse shell from the victim server. The files are uploaded to /Content/Template/root/reverse-shell.aspx and can be simply triggered by browsing that URL.

References

l00neyhacker/CVE-2021-36582 · Third Party Advisory

More vulnerabilities in kooboo cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free