high8.8Public exploit code
CVE-2021-46360
Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading a PHP shell throug…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Composr-CMS Version <=10.0.39 - Authenticated Remote Code Execution2023-03-25 · webapps · php · Verified
Impact
Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading a PHP shell through /adminzone/index.php?page=admin-commandr.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ocproducts | Composr | through 10.0.39 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/171489/Composr-CMS-10.0.39-Remote-Code-Execution.html
- https://github.com/sartlabs/0days/blob/main/Composr-CMS/Exploit.py
- http://packetstormsecurity.com/files/171489/Composr-CMS-10.0.39-Remote-Code-Execution.html
- https://github.com/sartlabs/0days/blob/main/Composr-CMS/Exploit.py