CVE-2013-10054

LibrettoCMS File Manager Arbitrary File Upload

CVSS 9.3 CRITICALEPSS 1.6%CWE-434

Vexday Risk Score

63Prioridad alta

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS 9.3EPSS 1.6%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Ciclo de vida

14 jun 2013Exploit Metasploit disponible

04 ago 2025Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contains an unauthenticated arbitrary file upload vulnerability in its File Manager plugin. The upload handler located at adm/ui/js/ckeditor/plugins/pgrfilemanager/php/upload.php fails to properly validate file extensions, allowing attackers to upload files with misleading extensions and subsequently rename them to executable .php scripts. This enables remote code execution on the server without authentication.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Productos afectados

LibrettoCMS · LibrettoCMS

PoCs públicas encontradas — 3

cve_referenceraw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/libretto_upload_exec.rbno verificado cve_referencewww.exploit-db.com/exploits/26213no verificado cve_referencewww.exploit-db.com/exploits/26421no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/libretto_upload_exec.rb https://sourceforge.net/projects/librettocms/https://www.exploit-db.com/exploits/26213 https://www.exploit-db.com/exploits/26421 https://www.vulncheck.com/advisories/librettocms-file-manager-arbitrary-file-upload