CVE-2010-4313
Orbis CMS 1.0.2 - Authenticated Arbitrary File Upload via fileman_file_upload.php
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-4313. PoCs published by Mark Stanislav.
AI-analyzed exploit summary This exploit demonstrates an arbitrary script execution vulnerability in Orbis CMS 1.0.2, allowing authenticated users to upload and execute PHP scripts via the fileman_file_upload.php script. The PoC involves uploading a malicious PHP file and accessing it to execute system commands.
Description
Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users to execute arbitrary code by uploading a .php file, and then accessing it via a direct request to the file in uploads/.
Exploits (1)
This exploit demonstrates an arbitrary script execution vulnerability in Orbis CMS 1.0.2, allowing authenticated users to upload and execute PHP scripts via the fileman_file_upload.php script. The PoC involves uploading a malicious PHP file and accessing it to execute system commands.