Lucene search

Ocproducts Security Vulnerabilities

cve

CVE-2021-30149

Composr 10.0.36 allows upload and execution of PHP files.

9.8CVSS

9.6AI Score

0.026EPSS

2021-04-06 06:15 AM

102

cve

CVE-2021-30150

Composr 10.0.36 allows XSS in an XML script.

6.1CVSS

5.9AI Score

0.001EPSS

2021-04-06 06:15 AM

cve

CVE-2021-46360

Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading a PHP shell through /adminzone/index.php?page=admin-commandr.

8.8CVSS

9.2AI Score

0.019EPSS

2022-02-09 02:15 PM