critical9.8Public exploit code
CVE-2021-30149
Composr 10.0.36 allows upload and execution of PHP files.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Composr 10.0.36 - Remote Code Execution2021-04-08 · webapps · php
Impact
Composr 10.0.36 allows upload and execution of PHP files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ocproducts | Composr | Version 10.0.36 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/162128/Composr-10.0.36-Shell-Upload.html
- https://gitlab.com/composr-foundation/composr/commit/a71c44e03
- http://packetstormsecurity.com/files/162128/Composr-10.0.36-Shell-Upload.html
- https://gitlab.com/composr-foundation/composr/commit/a71c44e03