Back to Database
Status published
Critical
CVE-2021-42654
SiteServer CMS < V5.1 is affected by an unrestricted upload...
Vulnerability Description
SiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitrary code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-42654
Credits & Attribution
No credits recorded in the NVD database.
References
More from sscms
View All →CVE-2022-44299
SiteServerCMS 7.1.3 sscms has a file read vulnerability....
Unknown
0
CVE-2022-44298
SiteServer CMS 7.1.3 is vulnerable to SQL Injection....
Unknown
0
CVE-2022-44297
SiteServer CMS 7.1.3 has a SQL injection vulnerability the background....
Unknown
0
CVE-2022-30349
siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting (XSS)....
Medium
6.1
CVE-2022-28118
SiteServer CMS v7.x allows attackers to execute arbitrary code via...
Critical
9.8
Affected Vendor
sscms
View all reports →Affected Software
siteserver cms
Vulnerable Versions:
0
Timeline
Official Publish:
May 24th, 2022
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.