| Package | Affected versions | Patched versions |
|---|---|---|
| kooboo cms | = 2.1.1.0 |
In Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and then call upon it to receive a reverse shell from the victim server. The files are uploaded to /Content/Template/root/reverse-shell.aspx and can be simply triggered by browsing that URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free