CVE-2010-4313

Published: Dec 2, 2010Modified: Apr 29, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users to execute arbitrary code by uploading a .php file, and then accessing it via a direct request to the file in uploads/.

Affected (1)

Products: Novo Ws: Orbis Cms

Novo Ws

1 product

Orbis Cms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Novo Ws Orbis Cms	Version 1.0.2

References (10)

http://osvdb.org/69599

Source: cve@mitre.org

http://www.exploit-db.com/exploits/15636

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/514942/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/45103

Source: cve@mitre.org

http://www.uncompiled.com/2010/11/orbis-cms-arbitrary-script-execution-vulnerability-cve-2010-4313/

Source: cve@mitre.org

Exploit

http://osvdb.org/69599