CVE-2013-10054

Description

An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability in its File Manager plugin. The upload handler located at adm/ui/js/ckeditor/plugins/pgrfilemanager/php/upload.php fails to properly validate file extensions, allowing attackers to upload files with misleading extensions and subsequently rename them to executable .php scripts. This enables remote code execution on the server without authentication.

Reserved 2025-08-01 | Published 2025-08-04 | Updated 2025-08-04 | Assigner VulnCheck

Problem types

CWE-434 Unrestricted Upload of File with Dangerous Type

Product status

Default status
unknown

1.1.7
affected

Credits

CWH finder

sinn3r finder

References

raw.githubusercontent.com/.../webapp/libretto_upload_exec.rb exploit

www.exploit-db.com/exploits/26213 exploit

www.exploit-db.com/exploits/26421 exploit

sourceforge.net/projects/librettocms/ product

www.vulncheck.com/...ocms-file-manager-arbitrary-file-upload third-party-advisory

cve.org (CVE-2013-10054)

nvd.nist.gov (CVE-2013-10054)

Download JSON