Kooboo CMS 2.1.1.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:kooboo:kooboo_cms:2.1.1.0:*:*:*:*:*:*:*

part: a version: 2.1.1.0 update: *

VendorKooboo (43eac7af-6014-5418-9fe7-123767edd384)
ProductKooboo Cms (dd7a5476-6b90-5b34-9476-6017f09cb8cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/kooboo/cms purl2cpe 2026-06-01 10:16:36.533541
pkg:nuget/Kooboo_CMS purl2cpe 2026-06-01 10:16:36.533544

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-36582 vulnerable 2026-06-08 05:32:52.288165 Details available
In Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and then call upon it to receive a reverse shell from the victim server. The files are uploaded to /Content/Template/root/reverse-shell.aspx and can be simply triggered by browsing that URL.
Published: 2021-09-14T11:38:58.000Z
Updated: 2026-07-09T00:14:13.364Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36581 vulnerable 2026-06-08 05:32:52.287762 Details available
Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. The server does not verify the extension of the file and the tester was able to upload an aspx to the server.
Published: 2021-09-14T11:40:03.000Z
Updated: 2026-07-09T00:14:12.132Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.