CVE-2010-4313

Novo-ws Orbis Cms - Unrestricted File Upload

Title source: rule
STIX 2.1

Description

Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users to execute arbitrary code by uploading a .php file, and then accessing it via a direct request to the file in uploads/.

Exploits (1)

exploitdb WORKING POC
by Mark Stanislav · textwebappsphp
https://www.exploit-db.com/exploits/15636

References (5)

Core 5
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/15636
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/514942/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/69599
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/45103

Scores

EPSS 0.0574
EPSS Percentile 90.5%

Details

Status published
Products (1)
novo-ws/orbis_cms 1.0.2
Published Dec 02, 2010
Tracked Since Feb 18, 2026