CVE-2021-30149

Composr CMS 10.0.36 is vulnerable to remote code execution via PHP file upload. The vulnerability allows uploading and executing PHP files (e.g., via galleries or bulk upload paths), leading to high-impact outcomes (RCE) as indicated by multiple sources (CVE-2021-30149, exploit/public disclosures...

CVE-2021-30149

Composr 10.0.36 allows upload and execution of PHP files...

CVE-2021-30150

CVE-2021-30150 affects Composr 10.0.36, with a stored/reflected XSS in an XML script via the vulnerable endpoint data/ajax_tree.php?hook=choose_gallery... where a crafted XML/HTML-like payload can execute script code in the context of the page. Public writeups (PacketStorm exploit article and Exp...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

Ocproducts Composr 代码问题漏洞

Composr is an open source content management system CMS with advanced social, interactive and dynamic features. A PHP file upload and execution vulnerability exists in Composr version 10.0.36. An attacker can exploit this vulnerability to upload and execute PHP files...

CVE-2021-30150: Improper Neutralization of Input During Web Page Generation

Composr 10.0.36 allows XSS in an XML script...

Composr CMS 跨站脚本漏洞

Composr is an open source content management system CMS with advanced social, interactive and dynamic features. A cross-site scripting vulnerability exists in Composr version 10.0.36. The vulnerability can be exploited to conduct cross-site scripting attacks via XML scripts...

CVE-2021-30149: Unrestricted Upload of File with Dangerous Type

Composr 10.0.36 allows upload and execution of PHP files...

Composr CMS Cross-Site Scripting Vulnerability

Ocproducts Composr CMS is an open source content management system CMS written in PHP by ocProducts UK. Composr CMS 10.0.34 suffers from a cross-site scripting vulnerability that can be exploited by a remote attacker to insert arbitrary web script or HTML by adding a banner to the description fie...

Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting

Exploit Title: Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting Date: 3-12-2020 Exploit Author: Parshwa Bhavsar Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.34 Tested on: Windows 10/ Kali Linux Steps To Reproduce :- 1. Install the CM...

Composr CMS 10.0.34 Cross Site Scripting

Exploit Title: Composr CMS 10.0.34 - 'banners' Persistent Cross Site Scripting Date: 3-12-2020 Exploit Author: Parshwa Bhavsar Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.34 Tested on: Windows 10/ Kali Linux Steps To Reproduce :- 1. Install the CM...

CVE-2020-8789

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration...

CVE-2020-8789

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration...

Design/Logic Flaw

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration...

CVE-2020-8789

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration...

CVE-2020-8789

CVE-2020-8789 : Composr CMS 10.0.30 is vulnerable to a Persistent XSS via a Usergroup name under the Security configuration. The issue arises from insufficient input validation (as described in multiple sources) and is documented across NVD/NVD-derived pages and third-party feeds. No explicit rem...

CVE-2020-8789: Improper Neutralization of Input During Web Page Generation

Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration...

ocProducts Composr CMS Cross-Site Scripting Vulnerability

ocProducts Composr CMS is the UK ocProducts company's set of open source content management system CMS written in PHP language . A cross-site scripting vulnerability exists in ocProducts Composr CMS version 10.0.30. The vulnerability stems from a lack of proper validation of client-side data by t...

Composr CMS 10.0.30 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Title: Composr CMS 10.0.30 - Persistent Cross-Site Scripting Author: Manuel Garcia Cardenas Vendor: https://compo.sr/ CVE: N/A ============================================= MGC ALERT 2020-001 - Original release date: February 06, 2020 - Last...

Composr CMS 10.0.30 - Persistent Cross-Site Scripting

Title: Composr CMS 10.0.30 - Persistent Cross-Site Scripting Author: Manuel Garcia Cardenas Date: 2020-02-06 Vendor: https://compo.sr/ CVE: N/A ============================================= MGC ALERT 2020-001 - Original release date: February 06, 2020 - Last revised: May 21, 2020 - Discovered by:...