CVE-2021-36532

HIGH

Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php.

Affects 1 product across 1 vendor.

CVSS 3.18.1
EPSS0.8%
Percentile55th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, high complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-362: Race Condition

Software behavior depends on event timing that is not enforced, allowing attackers to exploit the timing window.

Related Attack Patterns (CAPEC)
CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
via CWE-362
CAPEC-26 Leveraging Race Conditions
via CWE-362

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A race condition vulnerability in portfolioCMS 1.0 allows remote attackers to execute arbitrary code through the fileExt parameter in the uploads.php script.

BSID: BS-2023-GLOBAL-297438-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2021-36532?
A race condition vulnerability in portfolioCMS 1.0 allows remote attackers to execute arbitrary code through the fileExt parameter in the uploads.php script.
What is the CVSS score for CVE-2021-36532?
CVE-2021-36532 has CVSS 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.8%.
Is CVE-2021-36532 actively exploited?
No confirmed active exploitation of CVE-2021-36532 as of 2026-09-25.
How do I remediate CVE-2021-36532?
Priority: IMMEDIATE.
What systems are affected by CVE-2021-36532?
CVE-2021-36532 affects Portfoliocms Project Portfoliocms.
Vulnerability Details
CVE IDCVE-2021-36532
BSIDBS-2023-GLOBAL-297438-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2023-02-03
Last Modified2026-06-17
ICS Relevance0%
Weakness (CWE)
Race Condition
SourceNVD
Official Description

Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost/admin/uploads.php.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability exists in the file upload functionality of portfolioCMS 1.0, specifically in the handling of the fileExt parameter in the uploads.php script. An attacker can exploit this race condition to upload a malicious file with a crafted file extension, leading to arbitrary code execution.

Exploitation Likelihood: HIGH

Affected Products
VendorProductAffected Versions
Portfoliocms Project Portfoliocms 1.0.0
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 1350 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash5586ffc6ecee6fab1f79f0a7e979bd65bb37041e7d8ce5eeb120daf15c0faf8aa1c3ac2f79acab0b3f5602ad9be403f1c839fb05bd168d65ea163168f800b667
Related CVEs affecting Portfoliocms Project
CVE-2018-12263 8.8 portfolioCMS 1.0.5 allows upload of arbitrary .php files via the admin/portfo... CVE-2018-15848 8.8 An issue was discovered in portfolioCMS 1.0.5. There is CSRF to create new pa... CVE-2020-20402 7.5 Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validat... CVE-2018-12110 7.2 portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter. CVE-2018-15849 4.3 An issue was discovered in portfolioCMS 1.0.5. There is CSRF to update the we...
View all Portfoliocms Project CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →