Lucene search
K

CVE-2021-46360

🗓️ 09 Feb 2022 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 96 Views🌐 WEB

Authenticated RCE in Composr-CMS 10.0.39 allows remote attackers to execute arbitrary cod

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
Composr CMS Version <=10.0.39 - Authenticated Remote Code Execution Exploit
27 Mar 202300:00
zdt
ATTACKERKB
CVE-2021-46360
9 Feb 202214:15
attackerkb
Circl
CVE-2021-46360
9 Feb 202216:12
circl
CNNVD
Composr CMS 代码问题漏洞
9 Feb 202200:00
cnnvd
Cvelist
CVE-2021-46360
9 Feb 202200:00
cvelist
Exploit DB
Composr-CMS Version &lt;=10.0.39 - Authenticated Remote Code Execution
25 Mar 202300:00
exploitdb
EUVD
EUVD-2021-33048
3 Oct 202520:07
euvd
NVD
CVE-2021-46360
9 Feb 202214:15
nvd
Packet Storm
Composr-CMS 10.0.39 Remote Code Execution
27 Mar 202300:00
packetstorm
Prion
Remote code execution
9 Feb 202214:15
prion
Rows per page
NVD
Node
ocproductscomposrRange10.0.39
ParameterPositionPathDescriptionCWE
pagepathadminzone/index.php?page=admin-commandrAuthenticated attacker can access admin-commandr to disable PHP upload protections and upload a PHP-based shell.CWE-434
keep_sessionquery paramcomposr-cms/data/commandr.php?keep_session=ef14cc258d93aEndpoint used to execute commands (e.g., rm .htaccess) enabling further code execution and upload of a PHP shell.CWE-434
_dataquery paramcomposr-cms/data/commandr.php?keep_session=ef14cc258d93aEndpoint used to execute commands (e.g., rm .htaccess) enabling further code execution and upload of a PHP shell.CWE-434

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 04:14Current
9.2High risk
Vulners AI Score9.2
CVSS 26.5
CVSS 3.18.8
EPSS0.09183
96