CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-30149

Composr 10.0.36 allows upload and execution of PHP files...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

Design/Logic Flaw

Composr 10.0.36 allows upload and execution of PHP files...

CVE-2021-30149

Composr 10.0.36 allows upload and execution of PHP files...

Design/Logic Flaw

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-30149

Composr 10.0.36 allows upload and execution of PHP files...

CVE-2021-30149

Composr CMS 10.0.36 is vulnerable to remote code execution via PHP file upload. The vulnerability allows uploading and executing PHP files (e.g., via galleries or bulk upload paths), leading to high-impact outcomes (RCE) as indicated by multiple sources (CVE-2021-30149, exploit/public disclosures...

CVE-2021-30149

Composr 10.0.36 allows upload and execution of PHP files...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-30150

CVE-2021-30150 affects Composr 10.0.36, with a stored/reflected XSS in an XML script via the vulnerable endpoint data/ajax_tree.php?hook=choose_gallery... where a crafted XML/HTML-like payload can execute script code in the context of the page. Public writeups (PacketStorm exploit article and Exp...

Ocproducts Composr 代码问题漏洞

Composr is an open source content management system CMS with advanced social, interactive and dynamic features. A PHP file upload and execution vulnerability exists in Composr version 10.0.36. An attacker can exploit this vulnerability to upload and execute PHP files...

PT-2021-18633

Name of the Vulnerable Software and Affected Versions Composr version 10.0.36 Description The issue allows for the upload and execution of PHP files, potentially leading to code execution. Recommendations For Composr version 10.0.36, update to a newer version that contains a fix for this issue. A...

PT-2021-18634

Name of the Vulnerable Software and Affected Versions Composr version 10.0.36 Description The issue allows for Cross Site Scripting XSS in an XML script. Recommendations For Composr version 10.0.36, at the moment, there is no information about a newer version that contains a fix for this...

Composr CMS 跨站脚本漏洞

Composr is an open source content management system CMS with advanced social, interactive and dynamic features. A cross-site scripting vulnerability exists in Composr version 10.0.36. The vulnerability can be exploited to conduct cross-site scripting attacks via XML scripts...

CVE-2021-30150: Improper Neutralization of Input During Web Page Generation

Composr 10.0.36 allows XSS in an XML script...

CVE-2021-30149: Unrestricted Upload of File with Dangerous Type

Composr 10.0.36 allows upload and execution of PHP files...

Composr CMS Cross-Site Scripting Vulnerability

Ocproducts Composr CMS is an open source content management system CMS written in PHP by ocProducts UK. Composr CMS 10.0.34 suffers from a cross-site scripting vulnerability that can be exploited by a remote attacker to insert arbitrary web script or HTML by adding a banner to the description fie...