What’s Vulnerable › Vulnerabilities
CVE-2021-36582
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-09-14 · updated 2026-07-09
- Weakness: CWE-434
Description
In Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and then call upon it to receive a reverse shell from the victim server. The files are uploaded to /Content/Template/root/reverse-shell.aspx and can be simply triggered by browsing that URL.
Affected products
- Kooboo Cms: 2.1.1.0
References
Get alerted when CVE-2021-36582 or the next vulnerability affects your stack