CVE-2021-36581

Critical · CVSS 9.8

Kooboo CMS — Unrestricted File Upload (CWE-434)

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: other; CWE-434

Description

Kooboo CMS 2.1.1.0 is vulnerable to Insecure file upload. It is possible to upload any file extension to the server. The server does not verify the extension of the file and the tester was able to upload an aspx to the server.

Search profile — drives PoC discovery

Symbols file uploadaspx uploadextension validation bypassCVE-2021-36581

Keywords CVE-2021-36581Kooboo CMSinsecure file uploadunrestricted file uploadaspx upload bypassKooboo CMS 2.1.1.0file extension bypassproof of concept

Versions: 2.1.1.0

Ranked PoCs (1) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

l00neyhacker/CVE-2021-36581 needs review

cited in references

gh_search

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T06:30:39.000Z