CVE-2021-36582
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk71th percentile - higher than 71% of all known CVEs
Summary
In Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and then call upon it to receive a reverse shell from the victim server. The files are uploaded to /Content/Template/root/reverse-shell.aspx and can be simply triggered by browsing that URL.
Risk Assessment
An attacker can gain full control over the server, steal data, install malware, or use the server for further attacks.
Recommendation
Immediately update Kooboo CMS to the latest version that fixes this vulnerability and restrict the ability to upload executable files to the server.
Original NVD description (English source)
In Kooboo CMS 2.1.1.0, it is possible to upload a remote shell (e.g., aspx) to the server and then call upon it to receive a reverse shell from the victim server. The files are uploaded to /Content/Template/root/reverse-shell.aspx and can be simply triggered by browsing that URL.