CVE-2021-30149

Composr 10.0.36 allows upload and execution of PHP files...

CVE-2021-30149

creationtimestamp| type| source ---|---|--- 2021-09-21 06:42:52+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/96 2024-11-14 06:08:58+00:00| seen| MISP/db590f1d-f0cf-4120-8ce3-24f4a9fde1a1...

Composr 10.0.36 - Remote Code Execution

Exploit Title: Composr 10.0.36 - Remote Code Execution Date: 04/06/2021 Exploit Author: Orion Hridoy Vendor Homepage: https://compo.sr/ Software Link: https://compo.sr/download.htm Version: 10.0.36 Tested on: Windows/Linux CVE : CVE-2021-30149 A RCE on Composr CMS has been discovered by BugsBD...

CVE-2021-30149

Composr 10.0.36 allows upload and execution of PHP files...

CVE-2021-30149

Composr CMS 10.0.36 is vulnerable to remote code execution via PHP file upload. The vulnerability allows uploading and executing PHP files (e.g., via galleries or bulk upload paths), leading to high-impact outcomes (RCE) as indicated by multiple sources (CVE-2021-30149, exploit/public disclosures...