Skip to content
OpenAdvisories

Product · umbraco

CMS

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2012-10054 Public exploit

    Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE

    Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes a SaveDLRScript operation that permits arbitrary file uploads without authentication. By exploiting a path tra…

    umbraco CMS