High severity8.8NVD Advisory· Published Feb 9, 2022· Updated Jun 17, 2026

CVE-2021-46360

Description

Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading a PHP shell through /adminzone/index.php?page=admin-commandr.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Composr-CMS/Composr-CMSdescription
Composr/Composr CMSllm-fuzzy
Range: <=10.0.39

Patches

Vulnerability mechanics

References

github.com/sartlabs/0days/blob/main/Composr-CMS/Exploit.pynvdExploitThird Party Advisory
packetstormsecurity.com/files/171489/Composr-CMS-10.0.39-Remote-Code-Execution.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.007
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000