CVE-2013-7057

Axway SecureTransport < 5.1 - Cross-Site Request Forgery via File Upload API

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2013-7057. PoCs published by Emmanuel Law.

AI-analyzed exploit summary This is a CSRF-based arbitrary file upload exploit for Axway Secure Transport 5.1 SP2. It leverages the lack of anti-CSRF tokens to upload a file via a crafted multipart/form-data request.

Description

Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that upload arbitrary files via a crafted request to api/v1.0/files/.

Exploits (1)

exploitdb WORKING POC
by Emmanuel Law · textwebappsphp
https://www.exploit-db.com/exploits/35046

This is a CSRF-based arbitrary file upload exploit for Axway Secure Transport 5.1 SP2. It leverages the lack of anti-CSRF tokens to upload a file via a crafted multipart/form-data request.

Classification
Working Poc 90%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: Axway Secure Transport 5.1 SP2
Auth required
Prerequisites: Victim must be authenticated to the target application · Attacker must trick victim into visiting a malicious page
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/show/osvdb/113851
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/98320
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/35046

Scores

EPSS 0.0143
EPSS Percentile 69.7%

Details

CWE
CWE-352
Status published
Products (1)
axway/securetransport < 5.1
Published Nov 04, 2014
Tracked Since Feb 18, 2026