PT-2021-21294 · Unknown · Kooboo Cms

L00Neyhacker · Published 2021-09-14 · Updated 2021-09-28 · CVE-2021-36582

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kooboo CMS version 2.1.1.0

Description The issue allows an attacker to upload a remote shell, such as an aspx file, to the server. The uploaded files are stored in the /Content/Template/root/ directory, for example, reverse-shell.aspx. An attacker can trigger the uploaded shell by simply browsing to its URL, potentially leading to a reverse shell from the victim server.

Recommendations For Kooboo CMS version 2.1.1.0, consider restricting access to the /Content/Template/root/ directory to prevent unauthorized file uploads. As a temporary workaround, avoid using the URL /Content/Template/root/reverse-shell.aspx until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2021-36582

Affected Products

Kooboo Cms

References · 6

• 🔥 https://github.com/l00neyhacker/CVE-2021-36582 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-36582 · Security Note
• http://kooboo.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-36582 · Vendor Advisory
• https://t.me/cvenotify/21563 · Telegram Post
• https://t.me/cibsecurity/28794 · Telegram Post